ALT-PU-2021-3108

Критический

ALT-PU-2021-3108: package nextcloud update to version 22.2.0-alt1

Источник

errata.altlinux.org

Дата публикации

25.10.2021

Дата обновления

25.10.2021

Устраненные уязвимости

ALT Linux branch p11

ALT Container

ALT Education

ALT Workstation

ALT Workstation K

ALT Server

ALT Virtualization PVE Edition

Описание

This update upgrades nextcloud to version 22.2.0-alt1.

Устраненные уязвимости26

CVE-2020-8293

Средний 6.5

Дата публикации: 26.01.2021

CWE-400

A missing input validation in Nextcloud Server before 20.0.2, 19.0.5, 18.0.11 allows users to store unlimited data in workflow rules causing load and potential DDoS on later interactions and usage with those rules.

CVSS 3.1

Средний 6.5

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack vector: Network
Complexity: Low
Privileges: Low
User interaction: None
Scope: Unchanged
Confidentiality: None
Integrity: None
Availability: High

CVSS 2.0

Средний 4

AV:N/AC:L/Au:S/C:N/I:N/A:P

Access vector: Network
Complexity: Low
Authentication: Single
Confidentiality: None
Integrity: None
Availability: Partial

Ссылки

CVE-2020-8293 https://nvd.nist.gov/vuln/detail/CVE-2020-8293

Ссылки1

ALT-PU-2021-3108 https://errata.altlinux.org/ALT-PU-2021-3108

Связанные уязвимости

ALT-PU-2021-3224

CVSS3: 9.8

altlinux

около 5 лет назад

ALT-PU-2021-3224: package `nextcloud` update to version 22.2.0-alt1

openSUSE-SU-2021:0262-1

suse-cvrf

почти 6 лет назад

Security update for nextcloud

CVE-2020-8293

CVSS3: 6.5

nvd

почти 6 лет назад

CVE-2020-8293

CVSS3: 6.5

debian

почти 6 лет назад

A missing input validation in Nextcloud Server before 20.0.2, 19.0.5, ...

openSUSE-SU-2021:1068-1

suse-cvrf

больше 5 лет назад

Security update for nextcloud