eap7-netty vulnerabilities (Red Hat)
198 vulnerabilities.
eap7-nettyRed HatNetty: SCTP reassembly nests buffers without bound7.5 Higheap7-nettyRed HatNetty Vulnerable to DNS Cache Poisoning via Missing Bailiwick Checks in CNAME Records8.7 Higheap7-nettyRed HatNetty: SNI handler pre-allocates up to 16 MiB from nine attacker bytes7.5 Higheap7-nettyRed HatNetty: HAProxy SSL TLV parsing leaks retained slice on invalid TLV length7.5 Higheap7-nettyRed HatNetty has Unbounded Direct Memory Consumption in its RedisDecoder7.5 Higheap7-nettyRed HatNetty: Memory Exhaustion in RedisArrayAggregator due to Deeply Nested Arrays7.5 Higheap7-nettyRed HatNetty has an IPv6 Subnet Filter Bypass via Incorrect Comparator Masking8.1 Higheap7-nettyRed HatNetty: HttpContentDecompressor maxAllocation bypass via Content-Encoding: br/zstd/snappy enables decompression bomb DoS7.5 Higheap7-nettyRed HatNetty: HTTP Request Smuggling due to malformed Transfer-Encoding6.5 Mediumeap7-nettyRed HatNetty: HttpClientCodec response desynchronization7.3 Higheap7-nettyRed HatNetty: Lz4FrameDecoder resource exhaustion7.5 Higheap7-nettyRed HatNetty: HTTP/1.0 TE+CL Coexistence Bypasses Smuggling Sanitization5.8 Mediumeap7-nettyRed HatNetty: DNS Codec Input Validation Bypass in Netty (Encoder + Decoder)7.5 Higheap7-nettyRed HatNetty: HTTP Header Injection via HttpProxyHandler Disabled Validation2.9 Loweap7-nettyRed HatNetty vulnerable to HTTP request smuggling and RTSP request injection via DefaultHttpRequest.setUri()5.3 Mediumeap7-nettyRed HatNetty MadeYouReset HTTP/2 DDoS Vulnerability8.2 Higheap7-nettyRed HatNetty HttpPostRequestDecoder can OOM5.3 Mediumeap7-nettyRed HatUndertow: outofmemoryerror due to @multipartconfig handling7.5 Higheap7-nettyRed HatEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations7.5 Higheap7-nettyRed HatBouncy Castle For Java LDAP injection vulnerability5.3 Mediumeap7-nettyRed Hattough-cookie Prototype Pollution vulnerability6.5 Mediumeap7-nettyRed Hatsemver vulnerable to Regular Expression Denial of Service5.3 Mediumeap7-nettyRed Hatnetty-handler SniHandler 16MB allocation6.5 Mediumeap7-nettyRed HatUndertow: infinite loop in sslconduit during close7.5 Higheap7-nettyRed HatApache Log4j 1.x (EOL) allows DoS in Chainsaw and SocketAppender7.5 Higheap7-nettyRed HatUndertow client not checking server identity presented by server certificate in https connections7.5 Higheap7-nettyRed HatInsecure Temporary File in RESTEasy5.5 Mediumeap7-nettyRed HatWildfly-elytron possibly vulnerable to timing attacks via use of unsafe comparator7.4 Higheap7-nettyRed HatApache James MIME4J: Temporary File Information Disclosure in MIME4J TempFileStorageProvider5.5 Mediumeap7-nettyRed HatApache CXF directory listing / code exfiltration7.5 Higheap7-nettyRed HatJettison Out-of-bounds Write vulnerability7.5 Higheap7-nettyRed HatHAProxyMessageDecoder Stack Exhaustion DoS5.3 Mediumeap7-nettyRed HatRemote Code execution in SnakeYAML8.3 Higheap7-nettyRed HatApache MINA SSHD: Java unsafe deserialization vulnerability9.8 Criticaleap7-nettyRed HatStack Overflow in Snakeyaml5.8 Mediumeap7-nettyRed HatApache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults9.8 Criticaleap7-nettyRed HatRemote code execution in HyperSQL DataBase8.0 Higheap7-nettyRed HatUncontrolled Resource Consumption in FasterXML jackson-databind7.5 Higheap7-nettyRed HatUncontrolled Resource Consumption in Jackson-databind7.5 Higheap7-nettyRed HatDoS in SnakeYAML6.5 Mediumeap7-nettyRed HatA flaw was found in Undertow. For an AJP 400 response, EAP 7 is improperly sending two response...7.5 Higheap7-nettyRed HatA flaw was found in Undertow. A potential security issue in flow control handling by the browser...7.5 Higheap7-nettyRed HatXNIO `notifyReadClosed` method logging message to unexpected end7.5 Higheap7-nettyRed Hatwildfly-core allows user with access to management interface to access vault expression, retrieve item from vault3.3 Loweap7-nettyRed HatUndertow vulnerable to Dos via Large AJP request7.5 Higheap7-nettyRed HatUndertow vulnerable to memory exhaustion due to buffer leak7.5 Higheap7-nettyRed Hatundertow Race Condition vulnerability5.9 Mediumeap7-nettyRed HatWildfly-Core user account mismanagement7.8 Higheap7-nettyRed HatThis is a concurrency issue that can result in the wrong caller principal being returned from the...5.3 Mediumeap7-nettyRed HatLocal Information Disclosure Vulnerability in io.netty:netty-codec-http5.5 Medium- Show moreLoading…