eap7-picketlink-impl vulnerabilities (Red Hat)
114 vulnerabilities.
-
eap7-picketlink-implRed Hat Artemis-server: artemis-jms-client: artemis-core-client: undertow-core: wildfly-messaging-activemq-subsystem: artemis messaging handlers in red hat eap permit deserialization by default 8.8 High -
eap7-picketlink-implRed Hat Wildfly: wildfly-iiop: wildfly-jacorb: wildfly: pre-auth denial of service on the iiop listener 7.5 High -
eap7-picketlink-implRed Hat Undertow: undertow-websockets: undertow: pre-auth dos on websocket endpoint with @serverendpoint class with any @onmessage method 7.5 High -
eap7-picketlink-implRed Hat Wildfly-iiop-openjdk: missing authentication on eap's iiop nameservice leads to mitm or dos 7.4 High -
eap7-picketlink-implRed Hat Jboss-remoting: jboss-remoting: integer overflow in messagereader leads to pre-authentication denial of service 7.5 High -
eap7-picketlink-implRed Hat Undertow-core: oom via missing limits in chunked trailer in eap's undertow 7.5 High -
eap7-picketlink-implRed Hat Openjdk-orb: unauthed class loading via iiop in eap 8.1 High -
eap7-picketlink-implRed Hat Picketlink-federation: picketlink saml 2.0 auth bypass via missing assertions 8.1 High -
eap7-picketlink-implRed Hat Jboss-marshalling-river: wildfly-clustering-infinispan-marshalling: jboss deserialization rce via unfiltered river unmarshaller 8.8 High -
eap7-picketlink-implRed Hat Undertow-core: undertow: authentication bypass via ajp ssl_cert/is_ssl forgery 7.4 High -
eap7-picketlink-implRed Hat Picketlink-federation: auth bypass in picketlink saml unsolicited-response 9.8 Critical -
eap7-picketlink-implRed Hat In Eclipse Mojarra versions 2.3 and following, URL handing in `DefaultFaceletFactory` does not... 7.5 High -
eap7-picketlink-implRed Hat jackson-core: Async parser maxNumberLength bypass via chunked digit accumulation (incomplete fix for CVE-2026-18401 / GHSA-72hv-8253-57qq) 8.7 High -
eap7-picketlink-implRed Hat jackson-databind: Deeply nested JsonNode throws StackOverflowError for toString() 6.3 Medium -
eap7-picketlink-implRed Hat jackson-databind: PolymorphicTypeValidator bypass via generic type parameters allows arbitrary class instantiation 8.1 High -
eap7-picketlink-implRed Hat Unbounded PGP AEAD chunk size leads to pre-auth resource exhaustion. 8.7 High -
eap7-picketlink-implRed Hat PKIX draft CompositeVerifier accepts empty signature sequence as valid. 6.3 Medium -
eap7-picketlink-implRed Hat Non-constant time comparisons risk private key leakage in FrodoKEM. 8.9 High -
eap7-picketlink-implRed Hat LDAP Injection Vulnerability in LDAPStoreHelper.java 5.5 Medium -
eap7-picketlink-implRed Hat GOSTCTR implementation unable to process more than 255 blocks correctly 9.3 Critical -
eap7-picketlink-implRed Hat Apache Artemis, Apache ActiveMQ Artemis: Auth bypass for Core downstream federation 9.3 Critical -
eap7-picketlink-implRed Hat Netty has unbounded pre-allocation in RedisArrayAggregator from RESP array length 7.5 High -
eap7-picketlink-implRed Hat Netty's wrapping plain trust manager silently disables hostname verification 7.5 High -
eap7-picketlink-implRed Hat Netty HAProxy: Unbalanced Reference Count in Nested PP2_TYPE_SSL TLV Parsing Leads to Memory Exhaustion 8.7 High -
eap7-picketlink-implRed Hat netty-codec-http2: ByteBuf Reference-Count Leak in DelegatingDecompressorFrameListener Leads to Memory Exhaustion 5.3 Medium -
eap7-picketlink-implRed Hat Netty's Lack of Lifecycle Cleanup Leads to Pooled ByteBuf Leak in RedisArrayAggregator 8.7 High -
eap7-picketlink-implRed Hat Netty has Insufficient Bailiwick Validation for NS Records 8.7 High -
eap7-picketlink-implRed Hat Netty: SCTP reassembly nests buffers without bound 7.5 High -
eap7-picketlink-implRed Hat Netty Vulnerable to DNS Cache Poisoning via Missing Bailiwick Checks in CNAME Records 8.7 High -
eap7-picketlink-implRed Hat Netty: SNI handler pre-allocates up to 16 MiB from nine attacker bytes 7.5 High -
eap7-picketlink-implRed Hat Netty: HAProxy SSL TLV parsing leaks retained slice on invalid TLV length 7.5 High -
eap7-picketlink-implRed Hat Netty has Unbounded Direct Memory Consumption in its RedisDecoder 7.5 High -
eap7-picketlink-implRed Hat Netty: Memory Exhaustion in RedisArrayAggregator due to Deeply Nested Arrays 7.5 High -
eap7-picketlink-implRed Hat Netty has an IPv6 Subnet Filter Bypass via Incorrect Comparator Masking 8.1 High -
eap7-picketlink-implRed Hat Netty: HttpContentDecompressor maxAllocation bypass via Content-Encoding: br/zstd/snappy enables decompression bomb DoS 7.5 High -
eap7-picketlink-implRed Hat Netty: HTTP Request Smuggling due to malformed Transfer-Encoding 6.5 Medium -
eap7-picketlink-implRed Hat Netty: HttpClientCodec response desynchronization 7.3 High -
eap7-picketlink-implRed Hat Netty: HTTP/1.0 TE+CL Coexistence Bypasses Smuggling Sanitization 5.8 Medium -
eap7-picketlink-implRed Hat Netty: DNS Codec Input Validation Bypass in Netty (Encoder + Decoder) 7.5 High -
eap7-picketlink-implRed Hat Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation 2.9 Low -
eap7-picketlink-implRed Hat Netty vulnerable to HTTP request smuggling and RTSP request injection via DefaultHttpRequest.setUri() 5.3 Medium -
eap7-picketlink-implRed Hat Undertow: infinite loop in sslconduit during close 7.5 High -
eap7-picketlink-implRed Hat Undertow client not checking server identity presented by server certificate in https connections 7.5 High -
eap7-picketlink-implRed Hat Insecure Temporary File in RESTEasy 5.5 Medium -
eap7-picketlink-implRed Hat Apache James MIME4J: Temporary File Information Disclosure in MIME4J TempFileStorageProvider 5.5 Medium -
eap7-picketlink-implRed Hat HAProxyMessageDecoder Stack Exhaustion DoS 5.3 Medium -
eap7-picketlink-implRed Hat Remote Code execution in SnakeYAML 8.3 High -
eap7-picketlink-implRed Hat Stack Overflow in Snakeyaml 5.8 Medium -
eap7-picketlink-implRed Hat Remote code execution in HyperSQL DataBase 8.0 High -
eap7-picketlink-implRed Hat DoS in SnakeYAML 6.5 Medium - Show olderLoading…