Out-of-bounds write in woodstox - CVE-2022-40152

Vulnerability identifier: #VU71586

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-40152

CWE-ID: CWE-787

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary error when processing untrusted input within the Woodstox XML parser. A remote attacker can pass a specially crafted input to the application, trigger an out-of-bounds write and crash the application.

woodstox
API Manager
IBM Data Risk Manager
API Gateway
JBoss Enterprise Application Platform
Oracle WebLogic Server
IBM Cloud Transformation Advisor
IBM Watson Discovery for IBM Cloud Pak for Data
IBM Watson Knowledge Catalog in Cloud Pak for Data
Dell Secure Connect Gateway
Bamboo Server
IBM Spectrum Protect Plus
Oracle Middleware Common Libraries and Tools
Middleware Common Libraries and Tools
Netcool Operations Insight
Red Hat Integration - Service Registry
Red Hat Integration Camel Extensions for Quarkus
QRadar User Behavior Analytics
IBM Sterling B2B Integrator
IBM Tivoli Business Service Manager
IBM Business Automation Workflow
IBM Cloud Pak for Business Automation
IBM Observability with Instana
SUSE Manager Proxy
SUSE Manager Server Module
SUSE Manager Server
SUSE Manager Retail Branch Server
SUSE Manager Proxy Module
openEuler
DataStage on Cloud Pak for Data
Oracle BI Publisher
Oracle Business Intelligence Enterprise Edition
IBM Business Automation Manager Open Editions
InfoSphere Data Architect
IBM ECM Content Management Interoperability Services
PowerStore T
IBM Cloud Pak for Watson AIOps
User Entity Behavior Analytics
IBM Tivoli Netcool Configuration Manager
Storage Protect Client
Storage Protect for Virtual Environments: Data Protection for VMware
Storage Protect for Virtual Environments: Data Protection for Hyper-V
Storage Protect for Space Management
Robotic Process Automation for Cloud Pak
SecureTransport
Red Hat Process Automation Manager (formerly JBoss BPM Suite)
Oracle Commerce Guided Search
Oracle Commerce Platform
Oracle JDeveloper
Red Hat Camel for Spring Boot
Oracle Communications Cloud Native Core Console
eap7-jboss-jsp (Red Hat package)
eap7-jboss-jsf (Red Hat package)
saltboot-formula
inter-server-sync
inter-server-sync-debuginfo
prometheus-formula
grafana-formula
salt-netapi-client
eap7-javaee-security-soteria (Red Hat package)
virtual-host-gatherer-Kubernetes
virtual-host-gatherer-VMware
virtual-host-gatherer
virtual-host-gatherer-libcloud
virtual-host-gatherer-Nutanix
eap7-jettison (Red Hat package)
eap7-ironjacamar (Red Hat package)
smdba
eap7-elytron-web (Red Hat package)
eap7-jboss-server-migration (Red Hat package)
eap7-wildfly-elytron (Red Hat package)
eap7-undertow (Red Hat package)
eap7-apache-sshd (Red Hat package)
eap7-jackson-databind (Red Hat package)
eap7-jackson-jaxrs-providers (Red Hat package)
eap7-jackson-modules-base (Red Hat package)
eap7-jackson-modules-java8 (Red Hat package)
eap7-jackson-core (Red Hat package)
eap7-jackson-annotations (Red Hat package)
jenkins (Red Hat package)
cobbler
eap7-hal-console (Red Hat package)
eap7-jboss-ejb-client (Red Hat package)
supportutils-plugin-susemanager
python3-rhnlib
python3-mgr-osa-common
python3-mgr-osa-dispatcher
python3-mgr-osad
mgr-osa-dispatcher
mgr-osad
python3-uyuni-common-libs
spacewalk-search
spacewalk-proxy-installer
spacewalk-admin
spacewalk-proxy-salt
spacewalk-proxy-package-manager
spacewalk-proxy-management
spacewalk-proxy-broker
spacewalk-proxy-redirect
spacewalk-proxy-common
spacewalk-certs-tools
python3-spacewalk-certs-tools
spacecmd
python3-spacewalk-client-setup
spacewalk-client-tools
spacewalk-client-setup
spacewalk-check
python3-spacewalk-client-tools
python3-spacewalk-check
spacewalk-backend-config-files-tool
spacewalk-backend-server
spacewalk-backend-iss-export
spacewalk-backend-config-files-common
spacewalk-backend-tools
spacewalk-backend-applet
spacewalk-backend-app
spacewalk-backend-package-push-server
spacewalk-backend-config-files
spacewalk-backend-xml-export-libs
spacewalk-backend-sql
spacewalk-backend-sql-postgresql
spacewalk-backend-xmlrpc
spacewalk-backend
spacewalk-backend-iss
susemanager-schema
uyuni-config-modules
susemanager-sls
spacewalk-base-minimal-config
spacewalk-base
spacewalk-html
spacewalk-base-minimal
susemanager
susemanager-tools
spacewalk-java-lib
spacewalk-taskomatic
spacewalk-java-postgresql
spacewalk-java
spacewalk-java-config
susemanager-docs_en-pdf
susemanager-docs_en
susemanager-doc-indexes
woodstox
jenkins-2-plugins (Red Hat package)
woodstox-core
woodstox-core-javadoc
eap7-jboss-remoting (Red Hat package)
eap7-hibernate-search (Red Hat package)
eap7-woodstox-core (Red Hat package)
eap7-wildfly (Red Hat package)
drools
susemanager-build-keys-web
susemanager-build-keys
py27-compat-salt
IBM Disconnected Log Collector
IBM Content Navigator
IBM Qradar SIEM
Operational Decision Manager
IBM InfoSphere Information Server

Install updates from vendor's website.

woodstox - addressed in versions 5.4.0, 6.4.0
API Manager - update to November 2022
API Gateway - update to November 2022
IBM Cloud Transformation Advisor - update to 3.4.0
IBM Watson Discovery for IBM Cloud Pak for Data - update to 4.6.5
IBM Watson Knowledge Catalog in Cloud Pak for Data - addressed in versions 4.8.8, 4.8.9, 5.1.1, 5.1.2, 5.1.3
DataStage on Cloud Pak for Data - update to 4.8.5
SecureTransport - update to 5.5-20230126
Dell Secure Connect Gateway - update to 5.16
Red Hat Process Automation Manager (formerly JBoss BPM Suite) - update to 7.13.4
JBoss Enterprise Application Platform - update to 7.4.9
IBM Business Automation Manager Open Editions - update to 8.0.3
InfoSphere Data Architect - update to 9.2.1
Bamboo Server - update to 9.2.9
IBM Spectrum Protect Plus - update to 10.1.15
eap7-jboss-jsp (Red Hat package) - addressed in versions api_2.3_spec-2.0.0-3.Final_redhat_00001.1.el7eap, api_2.3_spec-2.0.0-3.Final_redhat_00001.1.el8eap, api_2.3_spec-2.0.0-3.Final_redhat_00001.1.el9eap
eap7-jboss-jsf (Red Hat package) - addressed in versions api_2.3_spec-3.0.0-6.SP07_redhat_00001.1.el7eap, api_2.3_spec-3.0.0-6.SP07_redhat_00001.1.el8eap, api_2.3_spec-3.0.0-6.SP07_redhat_00001.1.el9eap
saltboot-formula - update to 0.1.1676908681.e90e0b1-150300.3.15.1
inter-server-sync - update to 0.2.7-150300.8.28.2
inter-server-sync-debuginfo - update to 0.2.7-150300.8.28.2
prometheus-formula - update to 0.7.0-150300.3.17.2
grafana-formula - update to 0.8.1-150300.3.9.2
salt-netapi-client - update to 0.21.0-150300.3.12.4
eap7-javaee-security-soteria (Red Hat package) - addressed in versions 1.0.1-3.redhat_00003.1.el7eap, 1.0.1-3.redhat_00003.1.el8eap, 1.0.1-3.redhat_00003.1.el9eap
virtual-host-gatherer-Kubernetes - update to 1.0.24-150300.3.9.2
virtual-host-gatherer-VMware - update to 1.0.24-150300.3.9.2
virtual-host-gatherer - update to 1.0.24-150300.3.9.2
virtual-host-gatherer-libcloud - update to 1.0.24-150300.3.9.2
virtual-host-gatherer-Nutanix - update to 1.0.24-150300.3.9.2
eap7-jettison (Red Hat package) - addressed in versions 1.5.2-1.redhat_00002.1.el7eap, 1.5.2-1.redhat_00002.1.el8eap, 1.5.2-1.redhat_00002.1.el9eap
eap7-ironjacamar (Red Hat package) - addressed in versions 1.5.10-1.Final_redhat_00001.1.el7eap, 1.5.10-1.Final_redhat_00001.1.el8eap, 1.5.10-1.Final_redhat_00001.1.el9eap
Netcool Operations Insight - update to 1.6.10
smdba - update to 1.7.11-0.150300.3.12.2
IBM Disconnected Log Collector - update to 1.8.3
eap7-elytron-web (Red Hat package) - addressed in versions 1.9.3-1.Final_redhat_00001.1.el7eap, 1.9.3-1.Final_redhat_00001.1.el8eap, 1.9.3-1.Final_redhat_00001.1.el9eap
eap7-jboss-server-migration (Red Hat package) - addressed in versions 1.10.0-24.Final_redhat_00023.1.el7eap, 1.10.0-24.Final_redhat_00023.1.el8eap, 1.10.0-24.Final_redhat_00023.1.el9eap
eap7-wildfly-elytron (Red Hat package) - addressed in versions 1.15.16-1.Final_redhat_00001.1.el7eap, 1.15.16-1.Final_redhat_00001.1.el8eap, 1.15.16-1.Final_redhat_00001.1.el9eap
IBM Data Risk Manager - update to 2.0.6.16
eap7-undertow (Red Hat package) - addressed in versions 2.2.22-1.SP3_redhat_00001.1.el7eap, 2.2.22-1.SP3_redhat_00001.1.el8eap, 2.2.22-1.SP3_redhat_00001.1.el9eap
Red Hat Integration - Service Registry - update to 2.4.3
eap7-apache-sshd (Red Hat package) - addressed in versions 2.9.2-1.redhat_00001.1.el7eap, 2.9.2-1.redhat_00001.1.el8eap, 2.9.2-1.redhat_00001.1.el9eap
eap7-jackson-databind (Red Hat package) - addressed in versions 2.12.7-1.redhat_00003.1.el7eap, 2.12.7-1.redhat_00003.1.el8eap, 2.12.7-1.redhat_00003.1.el9eap
eap7-jackson-jaxrs-providers (Red Hat package) - addressed in versions 2.12.7-1.redhat_00003.1.el7eap, 2.12.7-1.redhat_00003.1.el8eap, 2.12.7-1.redhat_00003.1.el9eap
eap7-jackson-modules-base (Red Hat package) - addressed in versions 2.12.7-1.redhat_00003.1.el7eap, 2.12.7-1.redhat_00003.1.el8eap, 2.12.7-1.redhat_00003.1.el9eap
eap7-jackson-modules-java8 (Red Hat package) - addressed in versions 2.12.7-1.redhat_00003.1.el7eap, 2.12.7-1.redhat_00003.1.el8eap, 2.12.7-1.redhat_00003.1.el9eap
eap7-jackson-core (Red Hat package) - addressed in versions 2.12.7-1.redhat_00003.1.el7eap, 2.12.7-1.redhat_00003.1.el8eap, 2.12.7-1.redhat_00003.1.el9eap
eap7-jackson-annotations (Red Hat package) - addressed in versions 2.12.7-1.redhat_00003.1.el7eap, 2.12.7-1.redhat_00003.1.el8eap, 2.12.7-1.redhat_00003.1.el9eap
Red Hat Integration Camel Extensions for Quarkus - update to 2.13.2
jenkins (Red Hat package) - update to 2.387.3.1684911776-3.el8
IBM ECM Content Management Interoperability Services - update to 3.0.7.0.2
IBM Content Navigator - update to 3.0.12.4
cobbler - update to 3.1.2-150300.5.19.1
eap7-hal-console (Red Hat package) - addressed in versions 3.3.16-1.Final_redhat_00001.1.el7eap, 3.3.16-1.Final_redhat_00001.1.el8eap, 3.3.16-1.Final_redhat_00001.1.el9eap
PowerStore T - update to 3.5.0.1-2083289
Red Hat Camel for Spring Boot - addressed in versions 3.18.3 Patch 2, 3.20.1
eap7-jboss-ejb-client (Red Hat package) - addressed in versions 4.0.49-1.Final_redhat_00001.1.el7eap, 4.0.49-1.Final_redhat_00001.1.el8eap, 4.0.49-1.Final_redhat_00001.1.el9eap
IBM Cloud Pak for Watson AIOps - update to 4.1.1
QRadar User Behavior Analytics - update to 4.1.12
supportutils-plugin-susemanager - update to 4.2.5-150300.3.9.2
python3-rhnlib - update to 4.2.7-150300.4.12.2
python3-mgr-osa-common - update to 4.2.9-150300.2.12.2
python3-mgr-osa-dispatcher - update to 4.2.9-150300.2.12.2
python3-mgr-osad - update to 4.2.9-150300.2.12.2
mgr-osa-dispatcher - update to 4.2.9-150300.2.12.2
mgr-osad - update to 4.2.9-150300.2.12.2
python3-uyuni-common-libs - update to 4.2.9-150300.3.14.1
spacewalk-search - update to 4.2.9-150300.3.15.2
spacewalk-proxy-installer - update to 4.2.11-150300.3.14.2
spacewalk-admin - update to 4.2.13-150300.3.18.1
spacewalk-proxy-salt - update to 4.2.13-150300.3.24.2
spacewalk-proxy-package-manager - update to 4.2.13-150300.3.24.2
spacewalk-proxy-management - update to 4.2.13-150300.3.24.2
spacewalk-proxy-broker - update to 4.2.13-150300.3.24.2
spacewalk-proxy-redirect - update to 4.2.13-150300.3.24.2
spacewalk-proxy-common - update to 4.2.13-150300.3.24.2
spacewalk-certs-tools - update to 4.2.19-150300.3.27.4
python3-spacewalk-certs-tools - update to 4.2.19-150300.3.27.4
spacecmd - update to 4.2.21-150300.4.33.2
python3-spacewalk-client-setup - update to 4.2.22-150300.4.30.2
spacewalk-client-tools - update to 4.2.22-150300.4.30.2
spacewalk-client-setup - update to 4.2.22-150300.4.30.2
spacewalk-check - update to 4.2.22-150300.4.30.2
python3-spacewalk-client-tools - update to 4.2.22-150300.4.30.2
python3-spacewalk-check - update to 4.2.22-150300.4.30.2
spacewalk-backend-config-files-tool - update to 4.2.26-150300.4.35.6
spacewalk-backend-server - update to 4.2.26-150300.4.35.6
spacewalk-backend-iss-export - update to 4.2.26-150300.4.35.6
spacewalk-backend-config-files-common - update to 4.2.26-150300.4.35.6
spacewalk-backend-tools - update to 4.2.26-150300.4.35.6
spacewalk-backend-applet - update to 4.2.26-150300.4.35.6
spacewalk-backend-app - update to 4.2.26-150300.4.35.6
spacewalk-backend-package-push-server - update to 4.2.26-150300.4.35.6
spacewalk-backend-config-files - update to 4.2.26-150300.4.35.6
spacewalk-backend-xml-export-libs - update to 4.2.26-150300.4.35.6
spacewalk-backend-sql - update to 4.2.26-150300.4.35.6
spacewalk-backend-sql-postgresql - update to 4.2.26-150300.4.35.6
spacewalk-backend-xmlrpc - update to 4.2.26-150300.4.35.6
spacewalk-backend - update to 4.2.26-150300.4.35.6
spacewalk-backend-iss - update to 4.2.26-150300.4.35.6
susemanager-schema - update to 4.2.27-150300.3.35.1
uyuni-config-modules - update to 4.2.31-150300.3.43.1
susemanager-sls - update to 4.2.31-150300.3.43.1
spacewalk-base-minimal-config - update to 4.2.32-150300.3.36.4
spacewalk-base - update to 4.2.32-150300.3.36.4
spacewalk-html - update to 4.2.32-150300.3.36.4
spacewalk-base-minimal - update to 4.2.32-150300.3.36.4
susemanager - update to 4.2.40-150300.3.49.1
susemanager-tools - update to 4.2.40-150300.3.49.1
spacewalk-java-lib - update to 4.2.47-150300.3.58.1
spacewalk-taskomatic - update to 4.2.47-150300.3.58.1
spacewalk-java-postgresql - update to 4.2.47-150300.3.58.1
spacewalk-java - update to 4.2.47-150300.3.58.1
spacewalk-java-config - update to 4.2.47-150300.3.58.1
susemanager-docs_en-pdf - update to 4.2-150300.12.39.2
susemanager-docs_en - update to 4.2-150300.12.39.2
susemanager-doc-indexes - update to 4.2-150300.12.39.4
woodstox - addressed in versions 4.4.2-150300.3.6.2, 4.4.2-150400.3.6.1
jenkins-2-plugins (Red Hat package) - update to 4.13.1684911916-1.el8
User Entity Behavior Analytics - update to 5.0.2
woodstox-core - update to 5.0.3-2
woodstox-core-javadoc - update to 5.0.3-2
eap7-jboss-remoting (Red Hat package) - addressed in versions 5.0.27-1.Final_redhat_00001.1.el7eap, 5.0.27-1.Final_redhat_00001.1.el8eap, 5.0.27-1.Final_redhat_00001.1.el9eap
eap7-hibernate-search (Red Hat package) - addressed in versions 5.10.13-3.Final_redhat_00001.1.el7eap, 5.10.13-3.Final_redhat_00001.1.el8eap, 5.10.13-3.Final_redhat_00001.1.el9eap
IBM Sterling B2B Integrator - addressed in versions 6.0.3.9, 6.1.1.4, 6.1.2.3, 6.2.0.0
IBM Tivoli Business Service Manager - update to 6.2.0.5
eap7-woodstox-core (Red Hat package) - addressed in versions 6.4.0-1.redhat_00001.1.el7eap, 6.4.0-1.redhat_00001.1.el8eap, 6.4.0-1.redhat_00001.1.el9eap
IBM Tivoli Netcool Configuration Manager - update to 6.4.2.17
IBM Qradar SIEM - addressed in versions 7.4.3 Fix Pack 9, 7.5.0 Update Pack 5
eap7-wildfly (Red Hat package) - addressed in versions 7.4.9-4.GA_redhat_00003.1.el7eap, 7.4.9-4.GA_redhat_00003.1.el8eap, 7.4.9-4.GA_redhat_00003.1.el9eap
drools - update to 7.17.0-150300.4.9.2
Storage Protect Client - update to 8.1.20.0
Storage Protect for Virtual Environments: Data Protection for VMware - update to 8.1.20.0
Storage Protect for Virtual Environments: Data Protection for Hyper-V - update to 8.1.20.0
Storage Protect for Space Management - update to 8.1.20.0
Operational Decision Manager - addressed in versions 8.10.5.1 Interim fix 38, 8.11.0.1 Interim fix 20, 8.11.1 Interim fix 8
IBM InfoSphere Information Server - update to 11.7.1.4 Service pack 1
susemanager-build-keys-web - update to 15.3.6-150300.3.6.2
susemanager-build-keys - update to 15.3.6-150300.3.6.2
IBM Business Automation Workflow - addressed in versions 21.0.3 IF014, 22.0.1 IF006, 22.0.2
IBM Cloud Pak for Business Automation - addressed in versions 21.0.3.15, 22.0.1.5
Robotic Process Automation for Cloud Pak - addressed in versions 21.0.7.1, 23.0.1
IBM Observability with Instana - update to 277
py27-compat-salt - update to 3000.3-150300.7.7.29.2

• https://github.com/advisories/GHSA-3f7h-mf4q-vrm4

• Denial of service in Woodstox
• Multiple vulnerabilities in Red Hat Integration Camel Extensions for Quarkus
• Multiple vulnerabilities in Red Hat JBoss Enterprise Application Platform 7.4
• Multiple vulnerabilities in JBoss Enterprise Application Platform 7.4 for RHEL 7
• Multiple vulnerabilities in JBoss Enterprise Application Platform 7.4 for RHEL 8
• Multiple vulnerabilities in JBoss Enterprise Application Platform 7.4 for RHEL 9
• Multiple vulnerabilities in IBM Tivoli Netcool Configuration Manager
• SUSE update for woodstox
• Multiple vulnerabilities in IBM Business Automation Workflow
• Multiple vulnerabilities in API Gateway and API Manager
• Multiple vulnerabilities in Axway SecureTransport (January 2023)
• Multiple vulnerabilities in Oracle WebLogic Server
• Multiple vulnerabilities in Oracle Commerce Guided Search
• Multiple vulnerabilities in IBM Tivoli Business Service Manager
• IBM Watson Discovery Cartridge for IBM Cloud Pak for Data update for XStream
• Out-of-bounds write in IBM ECM Content Management Interoperability Services (CMIS)
• Multiple vulnerabilities in Red Hat Integration Camel for Spring Boot
• Multiple vulnerabilities in IBM Cloud Transformation Advisor
• Multiple vulnerabilities in IBM Content Navigator
• Multiple vulnerabilities in IBM InfoSphere Information Server
• OpenShift Developer Tools and Services for OCP 4.13 update for jenkins and jenkins-2-plugins
• Multiple vulnerabilities in IBM Business Automation Manager Open Editions
• Multiple vulnerabilities in IBM QRadar User Behavior Analytics
• Multiple vulnerabilities in Red Hat Integration Camel for Spring Boot
• Multiple vulnerabilities in IBM Storage Protect Plus Server
• Multiple vulnerabilities in IBM Operational Decision Manager
• Multiple vulnerabilities in Red Hat Integration - Service Registry
• Multiple vulnerabilities in Middleware Common Libraries and Tools
• Multiple vulnerabilities in Dell Secure Connect Gateway
• Multiple vulnerabilities in Dell PowerStore Family
• Multiple vulnerabilities in Red Hat Process Automation Manager
• Multiple vulnerabilities in IBM Cloud Pak for Business Automation
• Multiple vulnerabilities in IBM Data Risk Manager
• Multiple vulnerabilities in Oracle BI Publisher
• Multiple vulnerabilities in IBM QRadar SIEM
• Multiple vulnerabilities in IBM Storage Protect Client and IBM Storage Protect for Space Management
• Multiple vulnerabilities in IBM Storage Protect for Virtual Environments
• Out-of-bounds write in Oracle Commerce Platform
• Multiple vulnerabilities in IBM Disconnected Log Collector
• Multiple vulnerabilities in Netcool Operations Insight
• Multiple vulnerabilities in IBM Robotic Process Automation for Cloud Pak
• SUSE update for SUSE Manager 4.2.11
• Multiple vulnerabilities in IBM Cloud Pak for Watson AIOps
• Bamboo Data Center and Server update for FasterXML woodstox
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Console
• Multiple vulnerabilities in IBM Sterling B2B Integrator
• Multiple vulnerabilities in Oracle Business Intelligence Enterprise Edition
• Out-of-bounds write in Oracle JDeveloper
• Out-of-bounds write in IBM Observability with Instana
• openEuler update for woodstox-core
• Multiple vulnerabilities in IBM DataStage on Cloud Pak for Data
• Multiple vulnerabilities in IBM Watson Knowledge Catalog
• Multiple vulnerabilities in IBM User Entity Behavior Analytics
• Multiple vulnerabilities in Oracle Middleware Common Libraries and Tools
• Multiple vulnerabilities in IBM InfoSphere Data Architect