風險: 中度風險
類型: 操作系統 - Network
於 F5 產品發現多個漏洞。遠端攻擊者可利用這些漏洞，於目標系統觸發遠端執行任意程式碼及繞過保安限制。
注意﹕
已有 CVE-2022-41622 的概念驗證碼。該漏洞與遠端執行任意程式碼有關，它需要至少具有資源管理員角色權限並通過 iControl SOAP 中的基本身份驗證進行身份驗證的用戶才能執行關鍵操作。因此，整體風險水平為中度風險。
在安裝軟體之前，請先瀏覽供應商之網站，以獲得更多詳細資料。
安裝供應商提供的修補程式：
RISK: Medium Risk
TYPE: Operating Systems - Networks OS
Multiple vulnerabilities were identified in F5 Products. A remote attacker could exploit some of these vulnerabilities to trigger remote code execution and security restriction bypass on the targeted system.
Note:
Proof of concept exploit for CVE-2022-41622 exists on the internet. The vulnerability is related to remote code execution, and it required a users who have at least resource administrator role privilege and are authenticated through basic authentication in iControl SOAP into performing critical actions. Hence, the overall risk level is medium.
Before installation of the software, please visit the vendor web-site for more details.
Apply fixes issued by the vendor:
RISK: Medium Risk
TYPE: Security software and application - Security Software & Appliance
A vulnerability has been identified in Samba. A remote user can exploit this vulnerability to trigger denial of service condition, elevation of privilege and data manipulation on the targeted system.
Before installation of the software, please visit the vendor web-site for more details.
Apply fixes issued by the vendor:
風險: 中度風險
類型: 伺服器 - 互聯網應用伺服器
於 IBM WebSphere Application Server 發現多個漏洞。遠端攻擊者可利用這些漏洞，於目標系統觸發阻斷服務狀況及資料篡改。
在安裝軟體之前，請先瀏覽供應商之網站，以獲得更多詳細資料。
安裝供應商提供的修補程式：
RISK: Medium Risk
TYPE: Servers - Internet App Servers
Multiple vulnerabilities were identified in IBM WebSphere Application Server. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition and data manipulation on the targeted system.
Before installation of the software, please visit the vendor web-site for more details.
Apply fixes issued by the vendor:
風險: 中度風險
類型: 操作系統 - LINUX
於Linux 內核發現多個漏洞。遠端攻擊者可利用這些漏洞，於目標系統觸發阻斷服務狀況、權限提升、遠端執行任意程式碼、洩露敏感資料、繞過保安限制及跨網站指令碼。
[更新於 2022-11-14]
更新受影響之系統或技術，解決方案及相關連結。
[更新於 2022-11-17]
更新影響，受影響之系統或技術，解決方案，漏洞識別碼及相關連結。
在安裝軟體之前，請先瀏覽供應商之網站，以獲得更多詳細資料。
對於 RedHat
安裝供應商提供的修補程式：
對於 SUSE
安裝供應商提供的修補程式：
RISK: Medium Risk
TYPE: Operating Systems - Linux
Multiple vulnerabilities were identified in Linux Kernel. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, elevation of privilege, remote code execution, sensitive information disclosure, security restriction bypass and cross-site scripting on the targeted system.
[Updated on 2022-11-14]
Updated System / Technologies affected, Solutions and Related Links.
[Updated on 2022-11-17]
Updated Impact, System / Technologies affected, Solutions, Vulnerability Identifier and Related Links.
Before installation of the software, please visit the vendor web-site for more details.
For RedHat
Apply fixes issued by the vendor:
For SUSE
Apply fixes issued by the vendor:
風險: 中度風險
類型: 用戶端 - 瀏覽器
於 Mozilla 產品發現多個漏洞。遠端攻擊者可利用這些漏洞，於目標系統觸發遠端執行任意程式碼、仿冒、資料洩露及繞過保安限制。
以下版本之前的版本﹕
在安裝軟體之前，請先瀏覽供應商之官方網站，以獲得更多詳細資料。
更新至版本:
RISK: Medium Risk
TYPE: Clients - Browsers
Multiple vulnerabilities were identified in Mozilla Products. A remote attacker could exploit some of these vulnerabilities to trigger remote code execution, spoofing, information disclosure and security restriction bypass on the targeted system.
Versions prior to:
Before installation of the software, please visit the vendor web-site for more details.
Apply fixes issued by the vendor:
風險: 中度風險
類型: 操作系統 - LINUX
於Linux 內核發現多個漏洞。遠端攻擊者可利用這些漏洞，於目標系統觸發阻斷服務狀況、權限提升、遠端執行任意程式碼、洩露敏感資料及繞過保安限制。
[更新於 2022-11-14]
更新受影響之系統或技術，解決方案及相關連結。
在安裝軟體之前，請先瀏覽供應商之網站，以獲得更多詳細資料。
對於 RedHat
安裝供應商提供的修補程式：
對於 SUSE
安裝供應商提供的修補程式：
RISK: Medium Risk
TYPE: Operating Systems - Linux
Multiple vulnerabilities were identified in Linux Kernel. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, elevation of privilege, remote code execution, sensitive information disclosure and security restriction bypass on the targeted system.
[Updated on 2022-11-14]
Updated System / Technologies affected, Solutions and Related Links.
Before installation of the software, please visit the vendor web-site for more details.
For RedHat
Apply fixes issued by the vendor:
For SUSE
Apply fixes issued by the vendor:
