VMWare Products Multiple Vulnerabilities

Release Date: 4 Aug 2022

RISK: Medium Risk

TYPE: Operating Systems - VM Ware

Multiple vulnerabilities were identified in VMware products. An attacker could exploit some of these vulnerabilities to trigger security restriction bypass, remote code execution, cross-site scripting and elevation of privilege.

---

Impact

• Security Restriction Bypass
• Elevation of Privilege
• Cross-Site Scripting
• Remote Code Execution

---

System / Technologies affected

• VMware Workspace ONE Access (Access)
• VMware Workspace ONE Access Connector (Access Connector)
• VMware Identity Manager (vIDM)
• VMware Identity Manager Connector (vIDM Connector)
• VMware vRealize Automation (vRA)
• VMware Cloud Foundation
• vRealize Suite Lifecycle Manager

---

Solutions

Before installation of the software, please visit the vendor web-site for more details.

 

• Apply fixes issued by the vendor:
  https://www.vmware.com/security/advisories/VMSA-2022-0021.html

---

Vulnerability Identifier

• CVE-2022-31656
• CVE-2022-31657
• CVE-2022-31658
• CVE-2022-31659
• CVE-2022-31660
• CVE-2022-31661
• CVE-2022-31662
• CVE-2022-31663
• CVE-2022-31664
• CVE-2022-31665

---

Source

• VMware
• AUSCERT

---

Related Link

• https://www.vmware.com/security/advisories/VMSA-2022-0021.html
• https://www.auscert.org.au/bulletins/ESB-2022.3764

Google Chrome 多個漏洞

發佈日期: 2022年08月03日

風險: 中度風險

類型: 用戶端 - 瀏覽器

於 Google Chrome 發現多個漏洞。遠端攻擊者可利用這些漏洞，於目標系統觸發遠端執行任意程式碼、敏感資料洩露及繞過保安限制。

---

影響

• 遠端執行程式碼
• 資料洩露
• 繞過保安限制

---

受影響之系統或技術

• Google Chrome 104.0.5112.79 之前的版本

---

解決方案

在安裝軟體之前，請先瀏覽供應商之網站，以獲得更多詳細資料。

安裝軟件供應商提供的修補程式：

• 更新至 104.0.5112.79 或之後版本

---

漏洞識別碼

• CVE-2022-2603
• CVE-2022-2604
• CVE-2022-2605
• CVE-2022-2606
• CVE-2022-2607
• CVE-2022-2608
• CVE-2022-2609
• CVE-2022-2610
• CVE-2022-2611
• CVE-2022-2612
• CVE-2022-2613
• CVE-2022-2614
• CVE-2022-2615
• CVE-2022-2616
• CVE-2022-2617
• CVE-2022-2618
• CVE-2022-2619
• CVE-2022-2620
• CVE-2022-2621
• CVE-2022-2622
• CVE-2022-2623
• CVE-2022-2624

---

資料來源

• Google Chrome

---

相關連結

• https://chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop.html

Google Chrome Multiple Vulnerabilities

Release Date: 3 Aug 2022

RISK: Medium Risk

TYPE: Clients - Browsers

Multiple vulnerabilities were identified in Google Chrome. A remote attacker could exploit some of these vulnerabilities to trigger remote code execution, sensitive information disclosure and security restriction bypass on the targeted system.

---

Impact

• Remote Code Execution
• Information Disclosure
• Security Restriction Bypass

---

System / Technologies affected

• Google Chrome prior to 104.0.5112.79

---

Solutions

Before installation of the software, please visit the software vendor web-site for more details.

Apply fixes issued by the vendor:

• Update to version 104.0.5112.79 or later

---

Vulnerability Identifier

• CVE-2022-2603
• CVE-2022-2604
• CVE-2022-2605
• CVE-2022-2606
• CVE-2022-2607
• CVE-2022-2608
• CVE-2022-2609
• CVE-2022-2610
• CVE-2022-2611
• CVE-2022-2612
• CVE-2022-2613
• CVE-2022-2614
• CVE-2022-2615
• CVE-2022-2616
• CVE-2022-2617
• CVE-2022-2618
• CVE-2022-2619
• CVE-2022-2620
• CVE-2022-2621
• CVE-2022-2622
• CVE-2022-2623
• CVE-2022-2624

---

Source

• Google Chrome

---

Related Link

• https://chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop.html

Apache HTTP Server 多個漏洞

發佈日期: 2022年08月02日

風險: 中度風險

類型: 伺服器 - 網站伺服器

於 Apache HTTP Server 發現多個漏洞。遠端攻擊者可利用這些漏洞，於目標系統觸發阻斷服務狀況、洩露敏感資料、跨網站指令碼及繞過保安限制。

 

---

影響

• 阻斷服務
• 資料洩露
• 跨網站指令碼
• 繞過保安限制

---

受影響之系統或技術

• Apache HTTP Server 2.4.54 之前的版本

 

對於IBM產品

詳情請參閱以下連結:

https://www.ibm.com/support/pages/node/6595149

 

對於F5產品

詳情請參閱以下連結:

https://support.f5.com/csp/article/K21192332

 

---

解決方案

在安裝軟體之前，請先瀏覽供應商之網站，以獲得更多詳細資料。

 

安裝供應商提供的修補程式：

• Apache HTTP Server 2.4.54 版本

 

對於IBM產品

詳情請參閱以下連結:

https://www.ibm.com/support/pages/node/6595149

 

對於F5產品

詳情請參閱以下連結:

https://support.f5.com/csp/article/K21192332

---

漏洞識別碼

• CVE-2022-26377
• CVE-2022-28330
• CVE-2022-28614
• CVE-2022-28615
• CVE-2022-29404
• CVE-2022-30522
• CVE-2022-30556
• CVE-2022-31813

---

資料來源

• Apache
• AusCERT
• IBM
• F5

---

相關連結

• https://httpd.apache.org/security/vulnerabilities_24.html
• https://www.auscert.org.au/bulletins/ESB-2022.3733
• https://www.auscert.org.au/bulletins/ESB-2022.3712
• https://www.ibm.com/support/pages/node/6595149
• https://support.f5.com/csp/article/K21192332

Apache HTTP Server Multiple Vulnerabilities

Release Date: 2 Aug 2022

RISK: Medium Risk

TYPE: Servers - Web Servers

Multiple vulnerabilities were identified in Apache HTTP Server. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, sensitive information disclosure, cross-site scripting and security restriction bypass on the targeted system.

 

---

Impact

• Denial of Service
• Information Disclosure
• Cross-Site Scripting
• Security Restriction Bypass

---

System / Technologies affected

• Apache HTTP Server versions prior to 2.4.54

 

For IBM Products

For detail, please refer to the links below:

https://www.ibm.com/support/pages/node/6595149

 

For F5 Products

For detail, please refer to the links below:

https://support.f5.com/csp/article/K21192332

---

Solutions

Before installation of the software, please visit the vendor web-site for more details.

 

Apply fixes issued by the vendor:

• Apache HTTP Server versions 2.4.54

 

For IBM Products

For detail, please refer to the links below:

https://www.ibm.com/support/pages/node/6595149

 

For F5 Products

For detail, please refer to the links below:

https://support.f5.com/csp/article/K21192332

---

Vulnerability Identifier

• CVE-2022-26377
• CVE-2022-28330
• CVE-2022-28614
• CVE-2022-28615
• CVE-2022-29404
• CVE-2022-30522
• CVE-2022-30556
• CVE-2022-31813

---

Source

• Apache
• AusCERT
• IBM
• F5

---

Related Link

• https://httpd.apache.org/security/vulnerabilities_24.html
• https://www.auscert.org.au/bulletins/ESB-2022.3733
• https://www.auscert.org.au/bulletins/ESB-2022.3712
• https://www.ibm.com/support/pages/node/6595149
• https://support.f5.com/csp/article/K21192332

Android多個漏洞

發佈日期: 2022年08月02日

風險: 中度風險

類型: 操作系統 - 流動裝置及操作系統

於 Android 發現多個漏洞。遠端攻擊者可利用這些漏洞，於目標系統觸發資料洩露、權限提升、遠端執行程式碼及阻斷服務狀況。

---

影響

• 權限提升
• 資料洩露
• 遠端執行程式碼
• 阻斷服務

---

受影響之系統或技術

• 2022-08-05 前的 Android 保安更新級別

---

解決方案

在安裝軟體之前，請先瀏覽供應商之網站，以獲得更多詳細資料。

• 安裝軟件供應商提供的修補程式：
  https://source.android.com/security/bulletin/2022-08-01

---

漏洞識別碼

• CVE-2021-0698
• CVE-2021-0887
• CVE-2021-0891
• CVE-2021-0946
• CVE-2021-0947
• CVE-2021-30259
• CVE-2021-39696
• CVE-2021-39815
• CVE-2022-1786
• CVE-2022-20082
• CVE-2022-20122
• CVE-2022-20239
• CVE-2022-20344
• CVE-2022-20345
• CVE-2022-20346
• CVE-2022-20347
• CVE-2022-20348
• CVE-2022-20349
• CVE-2022-20350
• CVE-2022-20352
• CVE-2022-20353
• CVE-2022-20354
• CVE-2022-20355
• CVE-2022-20356
• CVE-2022-20357
• CVE-2022-20358
• CVE-2022-20360
• CVE-2022-20361
• CVE-2022-22059
• CVE-2022-22061
• CVE-2022-22062
• CVE-2022-22067
• CVE-2022-22069
• CVE-2022-22070
• CVE-2022-22080
• CVE-2022-25668

---

資料來源

• Android

---

相關連結

• https://source.android.com/security/bulletin/2022-08-01

Android Multiple Vulnerabilities

Release Date: 2 Aug 2022

RISK: Medium Risk

TYPE: Operating Systems - Mobile & Apps

Multiple vulnerabilities were identified in Android. A remote attacker could exploit some of these vulnerabilities to trigger information disclosure, elevation of privilege, remote code execution and denial of service condition on the targeted system.

---

Impact

• Elevation of Privilege
• Information Disclosure
• Remote Code Execution
• Denial of Service

---

System / Technologies affected

• Android security patch level prior to 2022-08-05

---

Solutions

Before installation of the software, please visit the vendor web-site for more details.

• Apply fixes issued by the vendor:
  https://source.android.com/security/bulletin/2022-08-01

---

Vulnerability Identifier

• CVE-2021-0698
• CVE-2021-0887
• CVE-2021-0891
• CVE-2021-0946
• CVE-2021-0947
• CVE-2021-30259
• CVE-2021-39696
• CVE-2021-39815
• CVE-2022-1786
• CVE-2022-20082
• CVE-2022-20122
• CVE-2022-20239
• CVE-2022-20344
• CVE-2022-20345
• CVE-2022-20346
• CVE-2022-20347
• CVE-2022-20348
• CVE-2022-20349
• CVE-2022-20350
• CVE-2022-20352
• CVE-2022-20353
• CVE-2022-20354
• CVE-2022-20355
• CVE-2022-20356
• CVE-2022-20357
• CVE-2022-20358
• CVE-2022-20360
• CVE-2022-20361
• CVE-2022-22059
• CVE-2022-22061
• CVE-2022-22062
• CVE-2022-22067
• CVE-2022-22069
• CVE-2022-22070
• CVE-2022-22080
• CVE-2022-25668

---

Source

• Android

---

Related Link

• https://source.android.com/security/bulletin/2022-08-01

Mozilla Thunderbird 多個漏洞

發佈日期: 2022年08月02日

風險: 中度風險

類型: 用戶端 - 電郵用戶端

於 Mozilla Thunderbird 發現多個漏洞。遠端攻擊者可利用這些漏洞，於目標系統觸發阻斷服務狀況、彷冒、遠端執行任意程式碼及洩露敏感資料。

---

影響

• 阻斷服務
• 仿冒
• 遠端執行程式碼
• 資料洩露

---

受影響之系統或技術

• Thunderbird 91.12 之前版本
• Thunderbird 102.1 之前版本

---

解決方案

在安裝軟體之前，請先瀏覽供應商之官方網站，以獲得更多詳細資料。

• 更新至版本 91.12
• 更新至版本 102.1

---

漏洞識別碼

• CVE-2022-2505
• CVE-2022-36314
• CVE-2022-36318
• CVE-2022-36319

---

資料來源

• AusCERT
• Mozilla

---

相關連結

• https://www.auscert.org.au/bulletins/ESB-2022.3732
• https://www.auscert.org.au/bulletins/ESB-2022.3731
• https://www.mozilla.org/en-US/security/advisories/mfsa2022-31/
• https://www.mozilla.org/en-US/security/advisories/mfsa2022-32/

Mozilla Thunderbird Multiple Vulnerabilities

Release Date: 2 Aug 2022

RISK: Medium Risk

TYPE: Clients - Email Clients

Multiple vulnerabilities were identified in Mozilla Thunderbird. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, spoofing, remote code execution and sensitive information disclosure on the targeted system.

---

Impact

• Denial of Service
• Spoofing
• Remote Code Execution
• Information Disclosure

---

System / Technologies affected

• Thunderbird version prior to 91.12
• Thunderbird version prior to 102.1

---

Solutions

Before installation of the software, please visit the vendor web-site for more details.

• Update to version 91.12
• Update to version 102.1

---

Vulnerability Identifier

• CVE-2022-2505
• CVE-2022-36314
• CVE-2022-36318
• CVE-2022-36319

---

Source

• AusCERT
• Mozilla

---

Related Link

• https://www.auscert.org.au/bulletins/ESB-2022.3732
• https://www.auscert.org.au/bulletins/ESB-2022.3731
• https://www.mozilla.org/en-US/security/advisories/mfsa2022-31/
• https://www.mozilla.org/en-US/security/advisories/mfsa2022-32/

Ubuntu Linux 核心多個漏洞

發佈日期: 2022年08月02日

風險: 中度風險

類型: 操作系統 - LINUX

在Ubuntu Linux 核心發現多個漏洞，攻擊者可利用這些漏洞，於目標系統觸發阻斷服務狀況、權限提升、遠端執行任意程式碼及洩露敏感資料。

---

影響

• 阻斷服務
• 遠端執行程式碼
• 資料洩露
• 權限提升

---

受影響之系統或技術

• Ubuntu 14.04 ESM
• Ubuntu 16.04 ESM
• Ubuntu 18.04 LTS
• Ubuntu 20.04 LTS

 

---

解決方案

在安裝軟體之前，請先瀏覽供應商之網站，以獲得更多詳細資料。

 

安裝供應商提供的修補程式：

• https://ubuntu.com/security/notices/USN-5541-1
• https://ubuntu.com/security/notices/USN-5540-1
• https://ubuntu.com/security/notices/USN-5539-1

---

漏洞識別碼

• CVE-2021-4197
• CVE-2022-1011
• CVE-2022-1195
• CVE-2022-1198
• CVE-2022-1199
• CVE-2022-1204
• CVE-2022-1205
• CVE-2022-1353
• CVE-2022-1516
• CVE-2022-1789
• CVE-2022-2380
• CVE-2022-20141
• CVE-2022-25258
• CVE-2022-25375
• CVE-2022-28388
• CVE-2022-28389
• CVE-2022-33981
• CVE-2022-34918

---

資料來源

• AusCERT
• Ubuntu

---

相關連結

• https://www.auscert.org.au/bulletins/ESB-2022.3738
• https://www.auscert.org.au/bulletins/ESB-2022.3730
• https://www.auscert.org.au/bulletins/ESB-2022.3729
• https://ubuntu.com/security/notices/USN-5541-1
• https://ubuntu.com/security/notices/USN-5539-1
• https://ubuntu.com/security/notices/USN-5540-1

Ubuntu Linux Kernel Multiple Vulnerabilities

Release Date: 2 Aug 2022

RISK: Medium Risk

TYPE: Operating Systems - Linux

Multiple vulnerabilities have been identified in Ubuntu Linux Kernel. An attacker could exploit some of these vulnerabilities to trigger denial of service condition, elevation of privilege, remote code execution and sensitive information disclosure on the targeted system.

---

Impact

• Denial of Service
• Remote Code Execution
• Information Disclosure
• Elevation of Privilege

---

System / Technologies affected

• Ubuntu 14.04 ESM
• Ubuntu 16.04 ESM
• Ubuntu 18.04 LTS
• Ubuntu 20.04 LTS

---

Solutions

Before installation of the software, please visit the vendor web-site for more details.

 

Apply fixes issued by the vendor:

• https://ubuntu.com/security/notices/USN-5541-1
• https://ubuntu.com/security/notices/USN-5540-1
• https://ubuntu.com/security/notices/USN-5539-1

---

Vulnerability Identifier

• CVE-2021-4197
• CVE-2022-1011
• CVE-2022-1195
• CVE-2022-1198
• CVE-2022-1199
• CVE-2022-1204
• CVE-2022-1205
• CVE-2022-1353
• CVE-2022-1516
• CVE-2022-1789
• CVE-2022-2380
• CVE-2022-20141
• CVE-2022-25258
• CVE-2022-25375
• CVE-2022-28388
• CVE-2022-28389
• CVE-2022-33981
• CVE-2022-34918

---

Source

• AusCERT
• Ubuntu

---

Related Link

• https://www.auscert.org.au/bulletins/ESB-2022.3738
• https://www.auscert.org.au/bulletins/ESB-2022.3730
• https://www.auscert.org.au/bulletins/ESB-2022.3729
• https://ubuntu.com/security/notices/USN-5541-1
• https://ubuntu.com/security/notices/USN-5539-1
• https://ubuntu.com/security/notices/USN-5540-1