Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

redhat integration camel quarkus - vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv3
CVE-2023-44487
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
Ietf Http 2.0Nghttp2 Nghttp2Netty NettyEnvoyproxy Envoy 1.27.0Envoyproxy Envoy 1.26.4Envoyproxy Envoy 1.25.9Envoyproxy Envoy 1.24.10Eclipse JettyCaddyserver CaddyGolang Http2Golang GoGolang NetworkingF5 Big-ip AnalyticsF5 Big-ip Policy Enforcement ManagerF5 Big-ip Local Traffic ManagerF5 Big-ip Link ControllerF5 Big-ip Global Traffic ManagerF5 Big-ip Fraud Protection ServiceF5 Big-ip Domain Name SystemF5 Big-ip Application Security ManagerF5 Big-ip Application Acceleration ManagerF5 Big-ip Advanced Firewall Manager
8.1
CVSSv3
CVE-2023-4853
A flaw was found in Quarkus where HTTP security policies are not sanitizing certain character permutations correctly when accepting requests, resulting in incorrect evaluation of permissions. This issue could allow an malicious user to bypass the security policy altogether, resul...
Quarkus QuarkusRedhat Decision Manager 7.0Redhat Jboss Middleware Text-only Advisories 1.0Redhat Jboss Middleware 1Redhat Integration Service Registry -Redhat Integration Camel Quarkus -Redhat Build Of QuarkusRedhat Openshift Serverless -Redhat Integration Camel KRedhat Process Automation Manager 7.0Redhat Build Of Optaplanner 8.0Redhat Openshift Serverless 1.0Redhat Openshift Container Platform 4.10Redhat Openshift Container Platform 4.11Redhat Openshift Container Platform 4.12
7.5
CVSSv3
CVE-2023-1108
A flaw was found in undertow. This issue makes achieving a denial of service possible due to an unexpected handshake status updated in SslConduit, where the loop never terminates.
Redhat Decision Manager 7.0Redhat Single Sign-on -Redhat Process Automation 7.0Redhat Openstack Platform 13.0Redhat Jboss Enterprise Application Platform -Redhat Openshift Application Runtimes -Redhat Build Of Quarkus -Redhat Integration Service Registry -Redhat Integration Camel K -Redhat Jboss Enterprise Application Platform Expansion Pack -Redhat Fuse 1.0.0Redhat UndertowRedhat Openshift Container Platform 4.11Redhat Openshift Container Platform 4.12Redhat Openshift Container Platform For Linuxone 4.9Redhat Openshift Container Platform For Linuxone 4.10Redhat Openshift Container Platform For Power 4.9Redhat Openshift Container Platform For Power 4.10Redhat Jboss Enterprise Application Platform 7.4Redhat Single Sign-on 7.6Netapp Oncommand Workflow Automation -
3.7
CVSSv3
CVE-2022-41862
In PostgreSQL, a modified, unauthenticated server can send an unterminated string during the establishment of Kerberos transport encryption. In certain conditions a server can cause a libpq client to over-read and report an error message containing uninitialized bytes.
Postgresql PostgresqlFedoraproject Fedora 8Redhat Enterprise Linux 8.0Redhat Integration Service Registry -Redhat Integration Camel K -Redhat Integration Camel Quarkus -
7.5
CVSSv3
CVE-2022-4492
The undertow client is not checking the server identity presented by the server certificate in https connections. This is a compulsory step (at least it should be performed by default) in https and in http/2. I would add it to any TLS client protocol.
Redhat Jboss Enterprise Application Platform 7.0.0Redhat Single Sign-on 7.0Redhat Jboss Fuse 7.0.0Redhat Build Of Quarkus -Redhat Integration Service Registry -Redhat Integration Camel K -Redhat Undertow 2.7.0Redhat Integration Camel For Spring Boot -Redhat Migration Toolkit For Applications 6.0Redhat Migration Toolkit For Runtimes -
7.5
CVSSv3
CVE-2022-1259
A flaw was found in Undertow. A potential security issue in flow control handling by the browser over HTTP/2 may cause overhead or a denial of service in the server. This flaw exists because of an incomplete fix for CVE-2021-3629.
Redhat Jboss Enterprise Application Platform 7.0.0Redhat Single Sign-on 7.0Redhat Openshift Application Runtimes -Redhat Build Of Quarkus -Redhat Integration Camel K -Redhat UndertowRedhat Undertow 2.2.18Redhat Undertow 2.2.19Netapp Oncommand Workflow Automation -Netapp Oncommand Insight -Netapp Active Iq Unified Manager -Netapp Cloud Secure Agent -
7.5
CVSSv3
CVE-2022-0084
A flaw was found in XNIO, specifically in the notifyReadClosed method. The issue revealed this method was logging a message to another expected end. This flaw allows an malicious user to send flawed requests to a server, possibly causing log contention-related performance concern...
Redhat Single Sign-on 7.0Redhat Integration Camel K -Redhat Integration Camel Quarkus -Redhat Xnio
6.7
CVSSv3
CVE-2021-4178
A arbitrary code execution flaw was found in the Fabric 8 Kubernetes client affecting versions 5.0.0-beta-1 and above. Due to an improperly configured YAML parsing, this will allow a local and privileged malicious user to supply malicious YAML.
Redhat Fabric8-kubernetesRedhat Fabric8-kubernetes 5.8.0Redhat Fabric8-kubernetes 5.0.0Redhat Process Automation 7.0Redhat Openshift Application Runtimes -Redhat Descision Manager 7.0Redhat Integration Camel K -Redhat A-mq Streams 2.0.1Redhat Fuse 7.11Redhat Integration Camel Quarkus 2.2.1Redhat Build Of Quarkus 2.2.5
7.5
CVSSv3
CVE-2021-3690
A flaw was found in Undertow. A buffer leak on the incoming WebSocket PONG message may lead to memory exhaustion. This flaw allows an malicious user to cause a denial of service. The highest threat from this vulnerability is availability.
Redhat Single Sign-on -Redhat Jboss Enterprise Application Platform -Redhat Openshift Application Runtimes -Redhat Integration Camel K -Redhat Integration Camel Quarkus -Redhat Fuse 1.0Redhat UndertowRedhat Jboss Enterprise Application Platform 7.3Redhat Jboss Enterprise Application Platform 7.4
7.5
CVSSv3
CVE-2021-4104
JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration. The attacker can provide TopicBindingName and TopicConnectionFactoryBindingName configurations causing JMSAppender to perform JNDI requests t...
Apache Log4j 1.2Fedoraproject Fedora 35Redhat Jboss Operations Network 3.0Redhat Jboss A-mq 6.0.0Redhat Enterprise Linux 7.0Redhat Enterprise Linux 6.0Redhat Jboss Enterprise Application Platform 6.0.0Redhat Jboss Enterprise Application Platform 7.0Redhat Jboss Fuse 6.0.0Redhat Jboss Fuse Service Works 6.0Redhat Jboss Web Server 3.0Redhat Jboss Data Virtualization 6.0.0Redhat Enterprise Linux 8.0Redhat Single Sign-on 7.0Redhat Software Collections -Redhat Jboss Fuse 7.0.0Redhat Process Automation 7.0Redhat Jboss Data Grid 7.0.0Redhat Openshift Application Runtimes -Redhat Codeready Studio 12.0Redhat Integration Camel K -Redhat Openshift Container Platform 4.6
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-21111CVE-2024-32884IDORCVE-2023-1000CVE-2024-33260CVE-2024-3682reflected XSSrace conditionCVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook