Cloudflare Luki w zabezpieczeniach

Oś czasu

Rodzaj

Cloud Software34
Android App Software3
iOS App Software3

Produkt

Cloudflare WARP Client13
Cloudflare OctoRPKI8
Cloudflare quiche3
Cloudflare wrangler3
Cloudflare WARP Mobile Client3

Przeciwdziałanie

Official Fix27
Temporary Fix0
Workaround0
Unavailable0
Not Defined13

Wykorzystywanie

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined40

Wektor dostępu

Not Defined0
Physical0
Local14
Adjacent5
Network21

Uwierzytelnianie

Not Defined0
High6
Low19
None15

Interakcja z użytkownikiem

Not Defined0
Required13
None27

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤46
≤55
≤68
≤712
≤89
≤90
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤47
≤55
≤67
≤712
≤89
≤90
≤100

VulDB

≤10
≤22
≤36
≤45
≤57
≤611
≤72
≤87
≤90
≤100

NVD

≤10
≤20
≤30
≤41
≤50
≤64
≤71
≤89
≤96
≤102

CNA

≤10
≤20
≤30
≤44
≤54
≤610
≤710
≤86
≤94
≤100

Sprzedawca

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k18
<2k17
<5k5
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj dzisiaj

<1k35
<2k5
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj wielkość rynku

🔴 CTI Zajęcia

Affected Products (15): GoFlow (1), OctoRPKI (8), WARP (1), WARP Client (13), WARP Mobile Client (3), Warp (1), cfnts (1), circl (1), golz4 (1), miniflare (1), quiche (3), tokio-boring (1), workerd (1), wrangler (3), zlib (1)

OpublikowanoBaseTempSłaby punktProdWykPrzEPSSCTICVE
2024-03-125.95.8Cloudflare quiche denial of serviceCloud SoftwareNot DefinedOfficial Fix0.000430.03CVE-2024-1765
2024-03-123.73.6Cloudflare quiche denial of serviceCloud SoftwareNot DefinedOfficial Fix0.000430.00CVE-2024-1410
2024-01-044.74.6Cloudflare zlib deflate.c memory corruptionCloud SoftwareNot DefinedOfficial Fix0.000420.16CVE-2023-6992
2023-12-295.65.5Cloudflare wrangler HTTP Request weak authenticationCloud SoftwareNot DefinedOfficial Fix0.000450.00CVE-2023-7079
2023-12-297.77.6Cloudflare miniflare HTTP Request privilege escalationCloud SoftwareNot DefinedOfficial Fix0.000460.02CVE-2023-7078
2023-12-297.37.3Cloudflare wrangler Workers Sandbox privilege escalationCloud SoftwareNot DefinedOfficial Fix0.000530.00CVE-2023-7080
2023-12-125.35.3Cloudflare quiche QUIC Path Validation denial of serviceCloud SoftwareNot DefinedNot Defined0.000720.00CVE-2023-6193
2023-12-055.35.3Cloudflare tokio-boring TLS Connection set_ex_data denial of serviceCloud SoftwareNot DefinedNot Defined0.000460.00CVE-2023-6180
2023-09-073.83.8Cloudflare WARP Client denial of serviceCloud SoftwareNot DefinedNot Defined0.001580.00CVE-2023-3747
2023-08-294.14.1Cloudflare WARP Mobile Client privilege escalationAndroid App SoftwareNot DefinedOfficial Fix0.000450.04CVE-2023-0654

30 więcej wpisów nie jest pokazywanych

🔒 Login Required

You need to signup and login to see more of the remaining 30 results.

◂ PoprzedniPrzeglądKolejny ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!