eap7-activemq-artemis-cli vulnerabilities (Red Hat)
207 vulnerabilities.
eap7-activemq-artemis-cliRed HatNetty Vulnerable to DNS Cache Poisoning via Missing Bailiwick Checks in CNAME Records8.7 Higheap7-activemq-artemis-cliRed HatNetty: SNI handler pre-allocates up to 16 MiB from nine attacker bytes7.5 Higheap7-activemq-artemis-cliRed HatNetty: HAProxy SSL TLV parsing leaks retained slice on invalid TLV length7.5 Higheap7-activemq-artemis-cliRed HatNetty has Unbounded Direct Memory Consumption in its RedisDecoder7.5 Higheap7-activemq-artemis-cliRed HatNetty: Memory Exhaustion in RedisArrayAggregator due to Deeply Nested Arrays7.5 Higheap7-activemq-artemis-cliRed HatNetty has an IPv6 Subnet Filter Bypass via Incorrect Comparator Masking8.1 Higheap7-activemq-artemis-cliRed HatNetty: HttpContentDecompressor maxAllocation bypass via Content-Encoding: br/zstd/snappy enables decompression bomb DoS7.5 Higheap7-activemq-artemis-cliRed HatNetty: HTTP Request Smuggling due to malformed Transfer-Encoding6.5 Mediumeap7-activemq-artemis-cliRed HatNetty: HttpClientCodec response desynchronization7.3 Higheap7-activemq-artemis-cliRed HatNetty: HTTP/1.0 TE+CL Coexistence Bypasses Smuggling Sanitization5.8 Mediumeap7-activemq-artemis-cliRed HatNetty: DNS Codec Input Validation Bypass in Netty (Encoder + Decoder)7.5 Higheap7-activemq-artemis-cliRed HatNetty: HTTP Header Injection via HttpProxyHandler Disabled Validation2.9 Loweap7-activemq-artemis-cliRed HatNetty vulnerable to HTTP request smuggling and RTSP request injection via DefaultHttpRequest.setUri()5.3 Mediumeap7-activemq-artemis-cliRed HatApache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK7.5 Higheap7-activemq-artemis-cliRed HatUndertow: outofmemoryerror due to @multipartconfig handling7.5 Higheap7-activemq-artemis-cliRed HatEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations7.5 Higheap7-activemq-artemis-cliRed HatApache MINA SSHD: Information disclosure bugs with RootedFilesystem5.0 Mediumeap7-activemq-artemis-cliRed HatBouncy Castle For Java LDAP injection vulnerability5.3 Mediumeap7-activemq-artemis-cliRed Hattough-cookie Prototype Pollution vulnerability6.5 Mediumeap7-activemq-artemis-cliRed Hatsemver vulnerable to Regular Expression Denial of Service5.3 Mediumeap7-activemq-artemis-cliRed Hatnetty-handler SniHandler 16MB allocation6.5 Mediumeap7-activemq-artemis-cliRed HatUse of temporary directory for file creation in `FileBackedOutputStream` in Guava5.5 Mediumeap7-activemq-artemis-cliRed HatCookie parsing of quoted values can exfiltrate values from other cookies in Eclipse Jetty2.4 Loweap7-activemq-artemis-cliRed HatOutOfMemoryError for large multipart without filename in Eclipse Jetty5.3 Mediumeap7-activemq-artemis-cliRed HatUndertow: infinite loop in sslconduit during close7.5 Higheap7-activemq-artemis-cliRed HatApache Log4j 1.x (EOL) allows DoS in Chainsaw and SocketAppender7.5 Higheap7-activemq-artemis-cliRed HatStack Buffer Overflow in Woodstox6.5 Mediumeap7-activemq-artemis-cliRed HatStack Buffer Overflow in Jettison6.5 Mediumeap7-activemq-artemis-cliRed HatStack Buffer Overflow in Jettison6.5 Mediumeap7-activemq-artemis-cliRed HatA flaw was found in Undertow. For an AJP 400 response, EAP 7 is improperly sending two response...7.5 Higheap7-activemq-artemis-cliRed HatDenial of Service (DoS)7.5 Higheap7-activemq-artemis-cliRed HatXNIO `notifyReadClosed` method logging message to unexpected end7.5 Higheap7-activemq-artemis-cliRed HatUndertow vulnerable to Dos via Large AJP request7.5 Higheap7-activemq-artemis-cliRed HatUndertow vulnerable to Denial of Service (DoS) attacks7.5 Higheap7-activemq-artemis-cliRed HatUndertow vulnerable to memory exhaustion due to buffer leak7.5 Higheap7-activemq-artemis-cliRed HatThis is a concurrency issue that can result in the wrong caller principal being returned from the...5.3 Mediumeap7-activemq-artemis-cliRed HatLocal Information Disclosure Vulnerability in io.netty:netty-codec-http5.5 Mediumeap7-activemq-artemis-cliRed HatDeserialization of Untrusted Data7.7 Higheap7-activemq-artemis-cliRed HatPath Traversal in Moment.js7.5 Higheap7-activemq-artemis-cliRed HatPrototype Pollution in minimist9.8 Criticaleap7-activemq-artemis-cliRed HatA flaw was found in JBoss-client. The vulnerability occurs due to a memory leak on the JBoss...7.5 Higheap7-activemq-artemis-cliRed HatDeeply nested json in jackson-databind7.5 Higheap7-activemq-artemis-cliRed HatApache ActiveMQ Artemis DoS7.5 Higheap7-activemq-artemis-cliRed HatInfinite loop within Apache XercesJ xml parser6.5 Mediumeap7-activemq-artemis-cliRed HatVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...5.3 Mediumeap7-activemq-artemis-cliRed HatArbitrary code execution in H2 Console9.8 Criticaleap7-activemq-artemis-cliRed HatRCE in H2 Console9.8 Criticaleap7-activemq-artemis-cliRed HatHTTP fails to validate against control chars in header names which may lead to HTTP request smuggling6.5 Mediumeap7-activemq-artemis-cliRed HatBypass of the secureValidation property7.5 Higheap7-activemq-artemis-cliRed HatSnappyFrameDecoder doesn't restrict chunk length any may buffer skippable chunks in an unnecessary way7.5 High- Show moreLoading…