CWE-1035: OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
From the CWE List. © The MITRE Corporation.
Newest
- red hat amq broker 7, amq clients, build of apache camel 4 for quarkus 3 +14 more +16 more Io.netty/netty-codec-http: netty: incomplete validation of malformed transfer-encoding allows http request smuggling 6.5 Medium
- red hat amq broker 7, build of apache camel 4 for quarkus 3, build of apache camel for spring boot 4 +15 more +17 more Io.netty/netty-codec-http2: netty: http/2 header field values are not validated by default (cr/lf/nul passthrough) 6.5 Medium
- red hat amq broker 7, amq clients, build of apache camel 4 for quarkus 3 +14 more +16 more Io.netty/netty-codec-http: netty: http request smuggling due to control characters in the chunk-size line 6.5 Medium
- red hat amq broker 7, amq clients, build of apache camel 3.33.3.sp2 +15 more +17 more Io.netty/netty-codec-http: netty rtspdecoder method-token smuggling via trailing control byte 7.5 High
- red hat amq broker 7, build of apache camel 3.33.3.sp2, build of apache camel 4 for quarkus 3 +12 more +14 more Io.netty/netty-codec-haproxy: netty: haproxy proxy-v2 nested-tlv grandchild bytebuf reference-count leak (incomplete fix of pr #16881) 7.5 High
- red hat amq broker 7, amq clients, build of apache camel 3.33.3.sp2 +15 more +17 more Io.netty/netty-codec-http: netty: unbounded per-connection queue growth in websocketserverextensionhandler leads to denial of service 7.5 High
- red hat build of apache camel for spring boot 4, fuse 7, jboss enterprise application platform 7 +1 more +3 more Io.netty/netty-codec-stomp: netty: stomp codec content-length long-to-int truncation causes infinite decode loop dos 7.5 High
- red hat amq broker 7, build of apache camel 4 for quarkus 3, build of apache camel for spring boot 4 +15 more +17 more Io.netty/netty-codec-http2: netty: http/2 hpackencoder dos with large table size 5.3 Medium
- red hat build of apache camel for spring boot 4, fuse 7, jboss enterprise application platform 7 +1 more +3 more Io.netty/netty-codec-smtp: netty: unbounded multi-line response accumulation in smtpresponsedecoder leads to memory-exhaustion dos 7.5 High
- red hat build of apache camel for spring boot 4 Io.netty/netty-handler-ssl-ocsp: netty: missing extended key usage (eku) check in ocsp client allows certificate revocation bypass 5.9 Medium
- red hat amq broker 7, build of apache camel for spring boot 4, fuse 7 +2 more +4 more Io.netty/netty-codec-mqtt: netty: resource exhaustion in mqttdecoder 7.5 High
- red hat build of apache camel for spring boot 4, fuse 7, jboss enterprise application platform 7 +1 more +3 more Io.netty/netty-codec-memcache: netty: memcache binary codec signed/unsigned type mismatch causes frame desynchronization and response smuggling 6.5 Medium
- red hat build of apache camel for spring boot 4, fuse 7, jboss enterprise application platform 7 +1 more +3 more Io.netty/netty-codec-stomp: netty: bytebuf leak in stompsubframedecoder when a frame body is never terminated 7.5 High