eap7-jboss-server-migration-cli vulnerabilities (Red Hat)
300 vulnerabilities.
eap7-jboss-server-migration-cliRed HatUndertow: directory traversal vulnerability5.3 Mediumeap7-jboss-server-migration-cliRed HatEap-galleon: custom provisioning creates unsecured http-invoker6.8 Mediumeap7-jboss-server-migration-cliRed HatEap-7: heap exhaustion via deserialization7.5 Higheap7-jboss-server-migration-cliRed Hatjose4j denial of service via specifically crafted JWE6.5 Mediumeap7-jboss-server-migration-cliRed HatPrefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin5.9 Mediumeap7-jboss-server-migration-cliRed HatUndertow: ajp request closes connection exceeding maxrequestsize7.5 Higheap7-jboss-server-migration-cliRed HatWildfly-core: management user rbac permission allows unexpected reading of system-properties to an unauthorized actor6.5 Mediumeap7-jboss-server-migration-cliRed HatApache Santuario: Private Key disclosure in debug-log output6.5 Mediumeap7-jboss-server-migration-cliRed HatNetty has unbounded pre-allocation in RedisArrayAggregator from RESP array length7.5 Higheap7-jboss-server-migration-cliRed HatNetty's wrapping plain trust manager silently disables hostname verification7.5 Higheap7-jboss-server-migration-cliRed HatNetty HAProxy: Unbalanced Reference Count in Nested PP2_TYPE_SSL TLV Parsing Leads to Memory Exhaustion8.7 Higheap7-jboss-server-migration-cliRed Hatnetty-codec-http2: ByteBuf Reference-Count Leak in DelegatingDecompressorFrameListener Leads to Memory Exhaustion5.3 Mediumeap7-jboss-server-migration-cliRed HatNetty's Lack of Lifecycle Cleanup Leads to Pooled ByteBuf Leak in RedisArrayAggregator8.7 Higheap7-jboss-server-migration-cliRed HatNetty has Insufficient Bailiwick Validation for NS Records8.7 Higheap7-jboss-server-migration-cliRed HatNetty: SCTP reassembly nests buffers without bound7.5 Higheap7-jboss-server-migration-cliRed HatNetty Vulnerable to DNS Cache Poisoning via Missing Bailiwick Checks in CNAME Records8.7 Higheap7-jboss-server-migration-cliRed HatNetty: SNI handler pre-allocates up to 16 MiB from nine attacker bytes7.5 Higheap7-jboss-server-migration-cliRed HatNetty: HAProxy SSL TLV parsing leaks retained slice on invalid TLV length7.5 Higheap7-jboss-server-migration-cliRed HatNetty has Unbounded Direct Memory Consumption in its RedisDecoder7.5 Higheap7-jboss-server-migration-cliRed HatNetty: Memory Exhaustion in RedisArrayAggregator due to Deeply Nested Arrays7.5 Higheap7-jboss-server-migration-cliRed HatNetty has an IPv6 Subnet Filter Bypass via Incorrect Comparator Masking8.1 Higheap7-jboss-server-migration-cliRed HatNetty: HttpContentDecompressor maxAllocation bypass via Content-Encoding: br/zstd/snappy enables decompression bomb DoS7.5 Higheap7-jboss-server-migration-cliRed HatNetty: HTTP Request Smuggling due to malformed Transfer-Encoding6.5 Mediumeap7-jboss-server-migration-cliRed HatNetty: HttpClientCodec response desynchronization7.3 Higheap7-jboss-server-migration-cliRed HatNetty: Lz4FrameDecoder resource exhaustion7.5 Higheap7-jboss-server-migration-cliRed HatNetty: HTTP/1.0 TE+CL Coexistence Bypasses Smuggling Sanitization5.8 Mediumeap7-jboss-server-migration-cliRed HatNetty: DNS Codec Input Validation Bypass in Netty (Encoder + Decoder)7.5 Higheap7-jboss-server-migration-cliRed HatNetty: HTTP Header Injection via HttpProxyHandler Disabled Validation2.9 Loweap7-jboss-server-migration-cliRed HatNetty vulnerable to HTTP request smuggling and RTSP request injection via DefaultHttpRequest.setUri()5.3 Mediumeap7-jboss-server-migration-cliRed HatNetty MadeYouReset HTTP/2 DDoS Vulnerability8.2 Higheap7-jboss-server-migration-cliRed HatDenial of Service attack on windows app using Netty5.5 Mediumeap7-jboss-server-migration-cliRed HatSslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine7.5 Higheap7-jboss-server-migration-cliRed HatDenial of Service attack on windows app using Netty5.5 Mediumeap7-jboss-server-migration-cliRed HatNetty HttpPostRequestDecoder can OOM5.3 Mediumeap7-jboss-server-migration-cliRed HatApache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK7.5 Higheap7-jboss-server-migration-cliRed HatUndertow: outofmemoryerror due to @multipartconfig handling7.5 Higheap7-jboss-server-migration-cliRed HatImproper handling of case insensitive filesystems in Eclipse JGit allows arbitrary file write8.8 Higheap7-jboss-server-migration-cliRed HatEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations7.5 Higheap7-jboss-server-migration-cliRed HatApache MINA SSHD: Information disclosure bugs with RootedFilesystem5.0 Mediumeap7-jboss-server-migration-cliRed HatBouncy Castle For Java LDAP injection vulnerability5.3 Mediumeap7-jboss-server-migration-cliRed Hattough-cookie Prototype Pollution vulnerability6.5 Mediumeap7-jboss-server-migration-cliRed Hatsemver vulnerable to Regular Expression Denial of Service5.3 Mediumeap7-jboss-server-migration-cliRed Hatnetty-handler SniHandler 16MB allocation6.5 Mediumeap7-jboss-server-migration-cliRed HatUse of temporary directory for file creation in `FileBackedOutputStream` in Guava5.5 Mediumeap7-jboss-server-migration-cliRed HatCookie parsing of quoted values can exfiltrate values from other cookies in Eclipse Jetty2.4 Loweap7-jboss-server-migration-cliRed HatOutOfMemoryError for large multipart without filename in Eclipse Jetty5.3 Mediumeap7-jboss-server-migration-cliRed HatUndertow: infinite loop in sslconduit during close7.5 Higheap7-jboss-server-migration-cliRed HatApache Log4j 1.x (EOL) allows DoS in Chainsaw and SocketAppender7.5 Higheap7-jboss-server-migration-cliRed HatUndertow client not checking server identity presented by server certificate in https connections7.5 Higheap7-jboss-server-migration-cliRed HatInsecure Temporary File in RESTEasy5.5 Medium- Show moreLoading…