osci transport library vulnerabilities and fixes

Recent CVEs affecting osci transport library, with upgrade or downgrade steps. 3 tracked.

Also searched as: oscitransportlibrary.

osci transport library has 3 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2017-06-30. Highest priority: CVE-2017-10670 (score 57/100).

• CVE-2017-10670 CRITICAL 9.8 DOWNGRADE An XML External Entity (XXE) issue exists in OSCI-Transport 1.2 as used in OSCI Transport Library 1.6.1 (Java)
• CVE-2017-10669 MEDIUM 6.5 DOWNGRADE Signature Wrapping exists in OSCI-Transport 1.2 as used in OSCI Transport Library 1.6.1 (Java) and OSCI Transp
• CVE-2017-10668 MEDIUM 5.9 DOWNGRADE A Padding Oracle exists in OSCI-Transport 1.2 as used in OSCI Transport Library 1.6.1 (Java) and OSCI Transpor

FAQ

How do I fix osci transport library vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is osci transport library being exploited right now?

None of the tracked osci transport library CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which osci transport library CVE should I patch first?

CVE-2017-10670 currently ranks highest (57/100): An XML External Entity (XXE) issue exists in OSCI-Transport 1.2 as used in OSCI Transport Library 1.6.1 (Java).

RSS feed for osci transport library · ← Back to latest CVEs