ALT-PU-2021-3224

Критический

ALT-PU-2021-3224: package nextcloud update to version 22.2.0-alt1

Источник

errata.altlinux.org

Дата публикации

03.11.2021

Дата обновления

03.11.2021

Устраненные уязвимости

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades nextcloud to version 22.2.0-alt1.

Устраненные уязвимости26

CVE-2020-8293

Средний 6.5

Дата публикации: 26.01.2021

CWE-400

A missing input validation in Nextcloud Server before 20.0.2, 19.0.5, 18.0.11 allows users to store unlimited data in workflow rules causing load and potential DDoS on later interactions and usage with those rules.

CVSS 3.1

Средний 6.5

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack vector: Network
Complexity: Low
Privileges: Low
User interaction: None
Scope: Unchanged
Confidentiality: None
Integrity: None
Availability: High

CVSS 2.0

Средний 4

AV:N/AC:L/Au:S/C:N/I:N/A:P

Access vector: Network
Complexity: Low
Authentication: Single
Confidentiality: None
Integrity: None
Availability: Partial

Ссылки

CVE-2020-8293 https://nvd.nist.gov/vuln/detail/CVE-2020-8293

Ссылки1

ALT-PU-2021-3224 https://errata.altlinux.org/ALT-PU-2021-3224

Связанные уязвимости

ALT-PU-2021-3108

CVSS3: 9.8

altlinux

около 5 лет назад

ALT-PU-2021-3108: package `nextcloud` update to version 22.2.0-alt1

openSUSE-SU-2021:0262-1

suse-cvrf

почти 6 лет назад

Security update for nextcloud

CVE-2020-8293

CVSS3: 6.5

nvd

почти 6 лет назад

CVE-2020-8293

CVSS3: 6.5

debian

почти 6 лет назад

A missing input validation in Nextcloud Server before 20.0.2, 19.0.5, ...

openSUSE-SU-2021:1068-1

suse-cvrf

больше 5 лет назад

Security update for nextcloud