NULL pointer dereference in python-cryptography - CVE-2024-26130

Vulnerability identifier: #VU87129

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2024-26130

CWE-ID: CWE-476

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error within pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override. A remote attacker can pass specially crafted data to the application and perform a denial of service (DoS) attack.

python-cryptography
Cloud Pak for Security (CP4S)
Gentoo Linux
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise Desktop 15
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for ARM 64
Python 3 Module
openSUSE Leap
Ubuntu
Anolis OS
Fedora
SmartFabric Storage Software
QRadar Suite
IBM Process Mining
Oracle Communications Network Analytics Data Director
Oracle Communications Cloud Native Core Binding Support Function
Oracle Communications Cloud Native Core Network Repository Function
IBM Cloud Pak for Business Automation
IBM Fusion HCI
IBM Watson Knowledge Catalog in Cloud Pak for Data
Red Hat Update Infrastructure (RHUI)
Red Hat Satellite
IBM Maximo Application Suite
Nautobot
QRadar App SDK
Guardium Data Security Center (GDSC)
IBM Cloud Pak for Watson AIOps
Oracle Communications Operations Monitor
Oracle Business Intelligence Enterprise Edition
Storage Protect Plus File Systems Agent
Truststore Manager
Storage Defender – Data Protect
Storage Virtualize Ansible Collection
Netezza Performance Server Replication Services
DB2 Warehouse on Cloud Pak for Data
DB2 on Cloud Pak for Data
SOAR QRadar Plugin App
Maximo Application Suite - Edge Data Collector
IBM Netezza for Cloud Pak for Data
Intel In-Band Manageability
PeopleSoft Enterprise PeopleTools
Planning Analytics Local
Oracle Communications Cloud Native Core Policy
Oracle Communications Cloud Native Core Security Edge Protection Proxy
Oracle Communications Cloud Native Core Service Communication Proxy
python-cryptography (Ubuntu package)
python3-cryptography (Ubuntu package)
yggdrasil-worker-forwarder (Red Hat package)
rubygem-hammer_cli_foreman_tasks (Red Hat package)
libcomps (Red Hat package)
python-json-stream-rs-tokenizer (Red Hat package)
python-iniparse (Red Hat package)
python3x-sqlparse (Red Hat package)
python-sqlparse (Red Hat package)
python-gnupg (Red Hat package)
python-inflection (Red Hat package)
python-defusedxml (Red Hat package)
python-ecdsa (Red Hat package)
python-pyrsistent (Red Hat package)
python-future (Red Hat package)
python3x-pulp-ansible (Red Hat package)
python-pulp-ansible (Red Hat package)
python-drf-spectacular (Red Hat package)
python-pulp-glue (Red Hat package)
m2crypto (Red Hat package)
python-drf-nested-routers (Red Hat package)
python-django-lifecycle (Red Hat package)
python-djangorestframework-queryfields (Red Hat package)
python-asyncio-throttle (Red Hat package)
ansible-rulebook (Red Hat package)
automation-eda-controller (Red Hat package)
python-brotli (Red Hat package)
python-et-xmlfile (Red Hat package)
python-django-readonly-field (Red Hat package)
createrepo_c (Red Hat package)
python-deprecated (Red Hat package)
python-drf-access-policy (Red Hat package)
python-xlwt (Red Hat package)
python-aiosignal (Red Hat package)
python-frozenlist (Red Hat package)
python-odfpy (Red Hat package)
python-pyjwkest (Red Hat package)
python-url-normalize (Red Hat package)
receptor (Red Hat package)
python-aiohttp-xmlrpc (Red Hat package)
python-jq (Red Hat package)
python-pulp-certguard (Red Hat package)
python-yarl (Red Hat package)
python3x-pydantic (Red Hat package)
python-pydantic (Red Hat package)
python-wrapt (Red Hat package)
python-markuppy (Red Hat package)
python-rhsm (Red Hat package)
python-productmd (Red Hat package)
python-googleapis-common-protos (Red Hat package)
python-grpcio (Red Hat package)
rhui-cds-plugin-authorizer (Red Hat package)
rhui-cds-plugin-fetcher (Red Hat package)
rhui-cds-plugin-mirror (Red Hat package)
rhui-cds-plugin-authorizer-cert (Red Hat package)
python-urlman (Red Hat package)
python-xlrd (Red Hat package)
python-charset-normalizer (Red Hat package)
python-markupsafe (Red Hat package)
python-backoff (Red Hat package)
python-urllib3 (Red Hat package)
ansible-automation-platform-installer (Red Hat package)
python-pygtrie (Red Hat package)
python-pyjwt (Red Hat package)
python-dateutil (Red Hat package)
ansible-core (Red Hat package)
python-pulp-container (Red Hat package)
python-pulp-container-client (Red Hat package)
ansible-collection-community-crypto (Red Hat package)
python-pycparser (Red Hat package)
python3x-requests (Red Hat package)
python-requests (Red Hat package)
python-aiodns (Red Hat package)
python-django-import-export (Red Hat package)
python-openpyxl (Red Hat package)
python-pyparsing (Red Hat package)
python3x-jinja2 (Red Hat package)
python-jinja2 (Red Hat package)
python-dynaconf (Red Hat package)
python-psycopg (Red Hat package)
python-psycopg_c (Red Hat package)
python-tablib (Red Hat package)
python-django-guid (Red Hat package)
python-types-cryptography (Red Hat package)
python-zipp (Red Hat package)
python-asgiref (Red Hat package)
python3x-idna (Red Hat package)
python-idna (Red Hat package)
foreman (Red Hat package)
foreman-installer (Red Hat package)
python-aiohttp (Red Hat package)
python3x-aiohttp (Red Hat package)
python-djangorestframework (Red Hat package)
python-pycryptodomex (Red Hat package)
python-pulp-rpm-client (Red Hat package)
python-pulp-rpm (Red Hat package)
python3x-pulpcore (Red Hat package)
python-pulpcore (Red Hat package)
python-pulpcore-client (Red Hat package)
python-async-timeout (Red Hat package)
python-uritemplate (Red Hat package)
python-pycares (Red Hat package)
python-django (Red Hat package)
python-redis (Red Hat package)
automation-controller (Red Hat package)
python-typing-extensions (Red Hat package)
automation-hub (Red Hat package)
python3x-galaxy-ng (Red Hat package)
python-galaxy-ng (Red Hat package)
python-jsonschema (Red Hat package)
rhui-installer (Red Hat package)
rhui-tools (Red Hat package)
rubygem-katello (Red Hat package)
python-protobuf (Red Hat package)
python3x-social-auth-app-django (Red Hat package)
python-social-auth-app-django (Red Hat package)
python-pyyaml (Red Hat package)
python-whitenoise (Red Hat package)
python-importlib-metadata (Red Hat package)
python-multidict (Red Hat package)
satellite (Red Hat package)
python-click (Red Hat package)
rubygem-foreman_rh_cloud (Red Hat package)
python3x-pillow (Red Hat package)
python-pillow (Red Hat package)
rubygem-foreman_theme_satellite (Red Hat package)
python-packaging (Red Hat package)
python-attrs (Red Hat package)
python3x-gunicorn (Red Hat package)
python-gunicorn (Red Hat package)
python-aiofiles (Red Hat package)
python3x-black (Red Hat package)
python-black (Red Hat package)
python-django-filter (Red Hat package)
python3x-pyOpenSSL (Red Hat package)
python-pyOpenSSL (Red Hat package)
python-cryptography-debugsource
python311-cryptography-debuginfo
python311-cryptography
python3.12-cryptography (Red Hat package)
dev-python/cryptography
python3x-cryptography (Red Hat package)
python-cryptography (Red Hat package)
python-cryptography
python3-cryptography
python-pytz (Red Hat package)
python-certifi (Red Hat package)
python-uuid6 (Red Hat package)
python-diff-match-patch (Red Hat package)
watsonx.data

Install updates from vendor's website.

python-cryptography - update to 42.0.4
SmartFabric Storage Software - update to 1.4.3
QRadar Suite - update to 1.10.20.0
IBM Process Mining - update to 1.14.4
Nautobot - update to 2.1.6
QRadar App SDK - update to 2.2.1
Guardium Data Security Center (GDSC) - update to 3.8.5
IBM Cloud Pak for Watson AIOps - update to 4.10.0
Intel In-Band Manageability - update to 4.2.2
Storage Protect Plus File Systems Agent - update to 10.1.16.2
IBM Cloud Pak for Business Automation - addressed in versions 24.0.0-IF008, 24.0.1-IF006, 25.0.0-IF004
python-cryptography (Ubuntu package) - addressed in versions Ubuntu Pro, 2.8-3ubuntu0.3
python3-cryptography (Ubuntu package) - addressed in versions Ubuntu Pro, 2.8-3ubuntu0.3, 3.4.8-1ubuntu2.2, 38.0.4-4ubuntu0.23.10.2, 41.0.7-4ubuntu0.1
yggdrasil-worker-forwarder (Red Hat package) - update to 0.0.3-2.el8sat
rubygem-hammer_cli_foreman_tasks (Red Hat package) - update to 0.0.21-1.el8sat
libcomps (Red Hat package) - update to 0.1.21-1.el8ui
python-json-stream-rs-tokenizer (Red Hat package) - update to 0.4.25-4.el8ui
python-iniparse (Red Hat package) - update to 0.4-40.0.1.el8ui
python3x-sqlparse (Red Hat package) - update to 0.5.0-1.el8ap
python-sqlparse (Red Hat package) - addressed in versions 0.5.0-1.el9ap, 0.5.0-1.el8ui
python-gnupg (Red Hat package) - update to 0.5.0-5.el8ui
python-inflection (Red Hat package) - update to 0.5.1-7.el8ui
python-defusedxml (Red Hat package) - update to 0.7.1-7.el8ui
python-ecdsa (Red Hat package) - update to 0.18.0-5.el8ui
python-pyrsistent (Red Hat package) - update to 0.18.1-6.el8ui
python-future (Red Hat package) - update to 0.18.3-5.el8ui
python3x-pulp-ansible (Red Hat package) - update to 0.20.7-1.el8ap
python-pulp-ansible (Red Hat package) - update to 0.20.7-1.el9ap
python-drf-spectacular (Red Hat package) - update to 0.26.5-5.el8ui
python-pulp-glue (Red Hat package) - update to 0.29.2-2.el8ui
m2crypto (Red Hat package) - update to 0.40.1-1.0.2.el8ui
python-drf-nested-routers (Red Hat package) - update to 0.93.4-6.el8ui
python-django-lifecycle (Red Hat package) - update to 1.0.0-4.el8ui
python-djangorestframework-queryfields (Red Hat package) - update to 1.0.0-8.el8ui
python-asyncio-throttle (Red Hat package) - update to 1.0.2-7.el8ui
ansible-rulebook (Red Hat package) - addressed in versions 1.0.7-1.el8ap, 1.0.7-1.el9ap
automation-eda-controller (Red Hat package) - addressed in versions 1.0.7-1.el8ap, 1.0.7-1.el9ap
python-brotli (Red Hat package) - update to 1.0.9-6.el8ui
python-et-xmlfile (Red Hat package) - update to 1.1.0-6.el8ui
python-django-readonly-field (Red Hat package) - update to 1.1.2-4.el8ui
createrepo_c (Red Hat package) - update to 1.1.3-1.0.1.el8ui
python-deprecated (Red Hat package) - update to 1.2.13-5.el8ui
python-drf-access-policy (Red Hat package) - update to 1.3.0-4.el8ui
python-xlwt (Red Hat package) - update to 1.3.0-7.el8ui
python-aiosignal (Red Hat package) - update to 1.3.1-5.el8ui
python-frozenlist (Red Hat package) - update to 1.3.3-5.el8ui
python-odfpy (Red Hat package) - update to 1.4.1-10.el8ui
python-pyjwkest (Red Hat package) - update to 1.4.2-9.el8ui
python-url-normalize (Red Hat package) - update to 1.4.3-8.el8ui
receptor (Red Hat package) - addressed in versions 1.4.8-1.el8ap, 1.4.8-1.el9ap
python-aiohttp-xmlrpc (Red Hat package) - update to 1.5.0-6.el8ui
Truststore Manager - update to 1.5.3
python-jq (Red Hat package) - update to 1.6.0-4.el8ui
python-pulp-certguard (Red Hat package) - update to 1.7.2-1.el8pc
python-yarl (Red Hat package) - update to 1.8.2-5.el8ui
python3x-pydantic (Red Hat package) - update to 1.10.15-1.el8ap
python-pydantic (Red Hat package) - update to 1.10.15-1.el9ap
python-wrapt (Red Hat package) - update to 1.14.1-5.el8ui
python-markuppy (Red Hat package) - update to 1.14-7.el8ui
python-rhsm (Red Hat package) - update to 1.19.2-7.0.1.el8ui
python-productmd (Red Hat package) - update to 1.33-7.el8ui
python-googleapis-common-protos (Red Hat package) - update to 1.59.1-5.el8ui
python-grpcio (Red Hat package) - update to 1.65.4-1.el8ui
rhui-cds-plugin-authorizer (Red Hat package) - update to 2.0.0-1.el8ui
rhui-cds-plugin-fetcher (Red Hat package) - update to 2.0.0-1.el8ui
rhui-cds-plugin-mirror (Red Hat package) - update to 2.0.0-1.el8ui
rhui-cds-plugin-authorizer-cert (Red Hat package) - update to 2.0.0-1.el8ui
Planning Analytics Local - addressed in versions 2.0.0.96, 2.1.3
python-urlman (Red Hat package) - update to 2.0.1-5.el8ui
python-xlrd (Red Hat package) - update to 2.0.1-9.el8ui
watsonx.data - update to 2.0.2
Storage Defender – Data Protect - update to 2.0.2
python-charset-normalizer (Red Hat package) - update to 2.1.1-5.el8ui
python-markupsafe (Red Hat package) - update to 2.1.2-5.el8ui
python-backoff (Red Hat package) - update to 2.2.1-5.el8ui
python-urllib3 (Red Hat package) - update to 2.2.3-1.el8ui
Storage Virtualize Ansible Collection - update to 2.3.1
ansible-automation-platform-installer (Red Hat package) - addressed in versions 2.4-7.1.el8ap, 2.4-7.1.el9ap
python-pygtrie (Red Hat package) - update to 2.5.0-5.el8ui
python-pyjwt (Red Hat package) - update to 2.5.0-5.el8ui
IBM Fusion HCI - update to 2.8.0
python-dateutil (Red Hat package) - update to 2.8.2-7.el8ui
ansible-core (Red Hat package) - addressed in versions 2.15.11-1.el8ap, 2.15.11-1.el9ap
python-pulp-container (Red Hat package) - update to 2.20.3-1.el8ui
python-pulp-container-client (Red Hat package) - update to 2.21.0-1.el8ui
ansible-collection-community-crypto (Red Hat package) - update to 2.21.1-1.el8ui
python-pycparser (Red Hat package) - update to 2.21-6.el8ui
python3x-requests (Red Hat package) - update to 2.32.2-1.el8ap
python-requests (Red Hat package) - addressed in versions 2.32.2-1.el9ap, 2.32.3-2.el8ui
python-aiodns (Red Hat package) - update to 3.0.0-7.el8ui
Netezza Performance Server Replication Services - update to 3.0.5.1
python-django-import-export (Red Hat package) - update to 3.1.0-4.el8ui
python-openpyxl (Red Hat package) - update to 3.1.0-5.el8ui
python-pyparsing (Red Hat package) - update to 3.1.1-4.el8ui
python3x-jinja2 (Red Hat package) - update to 3.1.4-1.el8ap
python-jinja2 (Red Hat package) - addressed in versions 3.1.4-1.el9ap, 3.1.4-1.el8ui
python-dynaconf (Red Hat package) - update to 3.1.12-4.el8ui
python-psycopg (Red Hat package) - update to 3.2.3-1.el8ui
python-psycopg_c (Red Hat package) - update to 3.2.3-1.el8ui
python-tablib (Red Hat package) - update to 3.3.0-5.el8ui
python-django-guid (Red Hat package) - update to 3.3.0-5.el8ui
python-types-cryptography (Red Hat package) - update to 3.3.23.2-5.el8ui
python-zipp (Red Hat package) - update to 3.4.0-8.el8ui
python-asgiref (Red Hat package) - update to 3.6.0-5.el8ui
python3x-idna (Red Hat package) - update to 3.7-1.el8ap
python-idna (Red Hat package) - update to 3.7-1.el9ap
foreman (Red Hat package) - update to 3.9.1.10-1.el8sat
foreman-installer (Red Hat package) - update to 3.9.3.5-1.el8sat
python-aiohttp (Red Hat package) - addressed in versions 3.9.4-1.el8ui, 3.9.5-1.el9ap
python3x-aiohttp (Red Hat package) - update to 3.9.5-1.el8ap
python-djangorestframework (Red Hat package) - update to 3.14.0-4.el8ui
python-pycryptodomex (Red Hat package) - update to 3.20.0-1.el8ui
python-pulp-rpm-client (Red Hat package) - update to 3.25.4-1.0.1.el8ui
python-pulp-rpm (Red Hat package) - update to 3.26.1-1.el8ui
python3x-pulpcore (Red Hat package) - update to 3.28.27-1.el8ap
python-pulpcore (Red Hat package) - addressed in versions 3.28.27-1.el9ap, 3.39.21-1.el8pc, 3.49.22-1.el8ui
python-pulpcore-client (Red Hat package) - update to 3.49.19-1.0.2.el8ui
python-async-timeout (Red Hat package) - update to 4.0.2-6.el8ui
python-uritemplate (Red Hat package) - update to 4.1.1-6.el8ui
python-pycares (Red Hat package) - update to 4.1.2-6.el8ui
python-django (Red Hat package) - addressed in versions 4.2.15-1.el8pc, 4.2.15-1.el8ui
python-redis (Red Hat package) - update to 4.3.4-5.el8ui
automation-controller (Red Hat package) - addressed in versions 4.5.7-1.el8ap, 4.5.7-1.el9ap
python-typing-extensions (Red Hat package) - update to 4.7.1-5.el8ui
DB2 Warehouse on Cloud Pak for Data - update to 4.8.5
DB2 on Cloud Pak for Data - update to 4.8.5
IBM Watson Knowledge Catalog in Cloud Pak for Data - addressed in versions 4.8.9, 5.1.3
automation-hub (Red Hat package) - addressed in versions 4.9.2-1.el8ap, 4.9.2-1.el9ap
python3x-galaxy-ng (Red Hat package) - update to 4.9.2-1.el8ap
python-galaxy-ng (Red Hat package) - update to 4.9.2-1.el9ap
python-jsonschema (Red Hat package) - update to 4.10.3-4.el8ui
Red Hat Update Infrastructure (RHUI) - update to 4.11.0
rhui-installer (Red Hat package) - update to 4.11.0.2-1.el8ui
rhui-tools (Red Hat package) - update to 4.11.0.4-1.el8ui
rubygem-katello (Red Hat package) - update to 4.11.0.17-1.el8sat
python-protobuf (Red Hat package) - update to 4.21.6-5.el8ui
SOAR QRadar Plugin App - update to 5.4.0
python3x-social-auth-app-django (Red Hat package) - update to 5.4.1-1.el8ap
python-social-auth-app-django (Red Hat package) - update to 5.4.1-1.el9ap
python-pyyaml (Red Hat package) - update to 5.4.1-8.0.1.el8ui
python-whitenoise (Red Hat package) - update to 6.0.0-5.el8ui
python-importlib-metadata (Red Hat package) - update to 6.0.1-5.el8ui
python-multidict (Red Hat package) - update to 6.0.4-5.el8ui
Red Hat Satellite - update to 6.15.4
satellite (Red Hat package) - update to 6.15.4-2.el8sat
python-click (Red Hat package) - update to 8.1.3-5.el8ui
IBM Maximo Application Suite - addressed in versions 8.10.11, 8.11.8
Maximo Application Suite - Edge Data Collector - update to 8.11.5
rubygem-foreman_rh_cloud (Red Hat package) - update to 9.0.58-1.el8sat
python3x-pillow (Red Hat package) - update to 10.3.0-1.el8ap
python-pillow (Red Hat package) - update to 10.3.0-1.el9ap
IBM Netezza for Cloud Pak for Data - update to 11.2.3.3
rubygem-foreman_theme_satellite (Red Hat package) - update to 13.3.0-0.1.el8sat
python-packaging (Red Hat package) - update to 21.3-6.el8ui
python-attrs (Red Hat package) - update to 21.4.0-6.el8ui
python3x-gunicorn (Red Hat package) - update to 22.0.0-1.el8ap
python-gunicorn (Red Hat package) - addressed in versions 22.0.0-1.el9ap, 22.0.0-1.el8pc, 22.0.0-1.0.1.el8ui
python-aiofiles (Red Hat package) - update to 22.1.0-5.el8ui
python3x-black (Red Hat package) - update to 22.8.0-2.el8ap
python-black (Red Hat package) - update to 22.8.0-2.el9ap
python-django-filter (Red Hat package) - update to 23.2-4.el8ui
python3x-pyOpenSSL (Red Hat package) - update to 24.1.0-1.el8ap
python-pyOpenSSL (Red Hat package) - addressed in versions 24.1.0-1.el9ap, 24.1.0-1.el8pc, 24.1.0-1.el8ui
python-cryptography-debugsource - update to 41.0.3-150400.16.15.1
python311-cryptography-debuginfo - update to 41.0.3-150400.16.15.1
python311-cryptography - addressed in versions 41.0.3-150400.16.15.1, 41.0.3-150600.23.3.1
python3.12-cryptography (Red Hat package) - update to 41.0.7-2.el9_6.1
dev-python/cryptography - update to 42.0.4
python3x-cryptography (Red Hat package) - update to 42.0.5-1.el8ap
python-cryptography (Red Hat package) - addressed in versions 42.0.5-1.el9ap, 42.0.8-1.el8pc, 42.0.8-1.el8ui
python-cryptography - update to 42.0.5-1.fc40
python3-cryptography - update to 42.0.5-2
python-pytz (Red Hat package) - update to 2022.2.1-6.el8ui
python-certifi (Red Hat package) - update to 2022.12.7-5.0.1.el8ui
python-uuid6 (Red Hat package) - update to 2023.5.2-5.el8ui
python-diff-match-patch (Red Hat package) - update to 20200713-7.el8ui

• https://github.com/pyca/cryptography/security/advisories/GHSA-6vqw-3v5j-54x4
• https://github.com/pyca/cryptography/pull/10423
• https://github.com/pyca/cryptography/commit/97d231672763cdb5959a3b191e692a362f1b9e55

• NULL pointer dereference in python-cryptography
• NULL pointer dereference in Nautobot
• SUSE update for python-cryptography
• Fedora 40 update for python-cryptography
• Multiple vulnerabilities in Intel In-Band Manageability
• NULL pointer dereference in IBM Process Mining
• NULL pointer dereference in IBM Maximo Application Suite
• Ubuntu update for python-cryptography
• Multiple vulnerabilities in IBM Storage Defender - Resiliency Service
• Multiple vulnerabilities in IBM QRadar App SDK
• NULL pointer dereference in IBM Maximo Application Suite - Edge Data Collector
• Multiple vulnerabilities in IBM QRadar Suite Software
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Policy
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Binding Support Function
• Multiple vulnerabilities in IBM SOAR QRadar Plugin App
• Multiple vulnerabilities in IBM Storage Fusion HCI
• Ubuntu update for python-cryptography
• Multiple vulnerabilities in IBM Db2 on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data
• Multiple vulnerabilities in Ansible Automation Platform 2.4 packages
• Multiple vulnerabilities in IBM Planning Analytics Local - IBM Planning Analytics Workspace
• SUSE update for python-cryptography
• Multiple vulnerabilities in IBM Storage Protect Plus File Systems Agent
• Gentoo update for cryptography
• Multiple vulnerabilities in Oracle Communications Network Analytics Data Director
• Multiple vulnerabilities in Oracle Communications Operations Monitor
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Service Communication Proxy
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Security Edge Protection Proxy
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Policy
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Network Repository Function
• NULL pointer dereference in IBM Storage Virtualize Ansible Collection
• NULL pointer dereference in IBM watsonx.data
• Multiple vulnerabilities in Red Hat Satellite 6.15
• Multiple vulnerabilities in PeopleSoft Enterprise PeopleTools
• Multiple vulnerabilities in IBM Netezza for Cloud Pak for Data (on Cloud)
• Multiple vulnerabilities in Oracle Business Intelligence Enterprise Edition
• Multiple vulnerabilities in Red Hat Update Infrastructure (RHUI)
• Anolis OS update for python-cryptography
• Dell SmartFabric Storage Software update for third-party components
• Multiple vulnerabilities in IBM Knowledge Catalog for IBM Cloud Pak for Data
• Multiple vulnerabilities in IBM Cloud Pak for AIOps
• Red Hat Enterprise Linux 9 update for python3.12-cryptography
• Multiple vulnerabilities in IBM Guardium Data Security Center
• Multiple vulnerabilities in IBM Netezza Performance Server Replication Services
• Multiple vulnerabilities in IBM Cloud Pak for Business Automation