eap7-netty-transport-native-unix-common vulnerabilities (Red Hat)
91 vulnerabilities.
eap7-netty-transport-native-unix-commonRed HatArtemis-server: artemis-jms-client: artemis-core-client: undertow-core: wildfly-messaging-activemq-subsystem: artemis messaging handlers in red hat eap permit deserialization by default8.8 Higheap7-netty-transport-native-unix-commonRed HatWildfly: wildfly-iiop: wildfly-jacorb: wildfly: pre-auth denial of service on the iiop listener7.5 Higheap7-netty-transport-native-unix-commonRed HatUndertow: undertow-websockets: undertow: pre-auth dos on websocket endpoint with @serverendpoint class with any @onmessage method7.5 Higheap7-netty-transport-native-unix-commonRed HatWildfly-iiop-openjdk: missing authentication on eap's iiop nameservice leads to mitm or dos7.4 Higheap7-netty-transport-native-unix-commonRed HatJboss-remoting: jboss-remoting: integer overflow in messagereader leads to pre-authentication denial of service7.5 Higheap7-netty-transport-native-unix-commonRed HatUndertow-core: oom via missing limits in chunked trailer in eap's undertow7.5 Higheap7-netty-transport-native-unix-commonRed HatOpenjdk-orb: unauthed class loading via iiop in eap8.1 Higheap7-netty-transport-native-unix-commonRed HatPicketlink-federation: picketlink saml 2.0 auth bypass via missing assertions8.1 Higheap7-netty-transport-native-unix-commonRed HatJboss-marshalling-river: wildfly-clustering-infinispan-marshalling: jboss deserialization rce via unfiltered river unmarshaller8.8 Higheap7-netty-transport-native-unix-commonRed HatUndertow-core: undertow: authentication bypass via ajp ssl_cert/is_ssl forgery7.4 Higheap7-netty-transport-native-unix-commonRed HatPicketlink-federation: auth bypass in picketlink saml unsolicited-response9.8 Criticaleap7-netty-transport-native-unix-commonRed HatIn Eclipse Mojarra versions 2.3 and following, URL handing in `DefaultFaceletFactory` does not...7.5 Higheap7-netty-transport-native-unix-commonRed Hatjackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for CVE-2026-18401 / GHSA-72hv-8253-57qq)8.7 Higheap7-netty-transport-native-unix-commonRed Hatjackson-databind: Deeply nested JsonNode throws StackOverflowError for toString()6.3 Mediumeap7-netty-transport-native-unix-commonRed Hatjackson-databind: PolymorphicTypeValidator bypass via generic type parameters allows arbitrary class instantiation8.1 Higheap7-netty-transport-native-unix-commonRed HatUnbounded PGP AEAD chunk size leads to pre-auth resource exhaustion.8.7 Higheap7-netty-transport-native-unix-commonRed HatPKIX draft CompositeVerifier accepts empty signature sequence as valid.6.3 Mediumeap7-netty-transport-native-unix-commonRed HatNon-constant time comparisons risk private key leakage in FrodoKEM.8.9 Higheap7-netty-transport-native-unix-commonRed HatLDAP Injection Vulnerability in LDAPStoreHelper.java5.5 Mediumeap7-netty-transport-native-unix-commonRed HatGOSTCTR implementation unable to process more than 255 blocks correctly9.3 Criticaleap7-netty-transport-native-unix-commonRed HatApache Artemis, Apache ActiveMQ Artemis: Auth bypass for Core downstream federation9.3 Criticaleap7-netty-transport-native-unix-commonRed HatOrg.hibernate/hibernate-core: hibernate: information disclosure and data deletion via second-order sql injection8.3 Higheap7-netty-transport-native-unix-commonRed HatUndertow-core: undertow http server fails to reject malformed host headers leading to potential cache poisoning and ssrf9.6 Criticaleap7-netty-transport-native-unix-commonRed HatUndertow: outofmemory when parsing form data encoding with application/x-www-form-urlencoded7.5 Higheap7-netty-transport-native-unix-commonRed HatUndertow: undertow madeyoureset http/2 ddos vulnerability7.5 Higheap7-netty-transport-native-unix-commonRed HatApache CXF: Untrusted JMS configuration can lead to RCE9.8 Criticaleap7-netty-transport-native-unix-commonRed Hatjackson-core Has Potential for StackoverflowError if user parses an input file that contains very deeply nested data8.7 Higheap7-netty-transport-native-unix-commonRed HatXXE vulnerability in Eclipse JGit6.8 Mediumeap7-netty-transport-native-unix-commonRed HatStack overflow in Protocol Buffers Java Lite8.7 Higheap7-netty-transport-native-unix-commonRed HatUndertow: learningpushhandler can lead to remote memory dos attacks5.3 Mediumeap7-netty-transport-native-unix-commonRed HatUndertow: response write hangs in case of java 17 tlsv1.3 newsessionticket7.5 Higheap7-netty-transport-native-unix-commonRed HatBouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation.7.5 Higheap7-netty-transport-native-unix-commonRed HatBouncy Castle crafted signature and public key can be used to trigger an infinite loop7.5 Higheap7-netty-transport-native-unix-commonRed HatBouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack")5.9 Mediumeap7-netty-transport-native-unix-commonRed HatApache HTTP Server: HTTP/2 DoS by memory exhaustion on endless continuation frames7.5 Higheap7-netty-transport-native-unix-commonRed HatEap-7: heap exhaustion via deserialization7.5 Higheap7-netty-transport-native-unix-commonRed HatWildfly-core: management user rbac permission allows unexpected reading of system-properties to an unauthorized actor6.5 Mediumeap7-netty-transport-native-unix-commonRed HatNetty has unbounded pre-allocation in RedisArrayAggregator from RESP array length7.5 Higheap7-netty-transport-native-unix-commonRed HatNetty's wrapping plain trust manager silently disables hostname verification7.5 Higheap7-netty-transport-native-unix-commonRed HatNetty HAProxy: Unbalanced Reference Count in Nested PP2_TYPE_SSL TLV Parsing Leads to Memory Exhaustion8.7 Higheap7-netty-transport-native-unix-commonRed Hatnetty-codec-http2: ByteBuf Reference-Count Leak in DelegatingDecompressorFrameListener Leads to Memory Exhaustion5.3 Mediumeap7-netty-transport-native-unix-commonRed HatNetty's Lack of Lifecycle Cleanup Leads to Pooled ByteBuf Leak in RedisArrayAggregator8.7 Higheap7-netty-transport-native-unix-commonRed HatNetty has Insufficient Bailiwick Validation for NS Records8.7 Higheap7-netty-transport-native-unix-commonRed HatNetty: SCTP reassembly nests buffers without bound7.5 Higheap7-netty-transport-native-unix-commonRed HatNetty Vulnerable to DNS Cache Poisoning via Missing Bailiwick Checks in CNAME Records8.7 Higheap7-netty-transport-native-unix-commonRed HatNetty: SNI handler pre-allocates up to 16 MiB from nine attacker bytes7.5 Higheap7-netty-transport-native-unix-commonRed HatNetty: HAProxy SSL TLV parsing leaks retained slice on invalid TLV length7.5 Higheap7-netty-transport-native-unix-commonRed HatNetty has Unbounded Direct Memory Consumption in its RedisDecoder7.5 Higheap7-netty-transport-native-unix-commonRed HatNetty: Memory Exhaustion in RedisArrayAggregator due to Deeply Nested Arrays7.5 Higheap7-netty-transport-native-unix-commonRed HatNetty has an IPv6 Subnet Filter Bypass via Incorrect Comparator Masking8.1 High- Show moreLoading…