eap7-undertow vulnerabilities (Red Hat)
317 vulnerabilities.
eap7-undertowRed HatApache HTTP Server: HTTP/2 DoS by memory exhaustion on endless continuation frames7.5 Higheap7-undertowRed HatXnio: stackoverflowexception when the chain of notifier states becomes problematically big7.5 Higheap7-undertowRed HatApache CXF SSRF Vulnerability using the Aegis databinding9.3 Criticaleap7-undertowRed HatUndertow: out-of-memory error after several closed connections with wildfly-http-client protocol7.5 Higheap7-undertowRed HatUndertow: directory traversal vulnerability5.3 Mediumeap7-undertowRed HatEap-galleon: custom provisioning creates unsecured http-invoker6.8 Mediumeap7-undertowRed HatEap-7: heap exhaustion via deserialization7.5 Higheap7-undertowRed HatPrefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin5.9 Mediumeap7-undertowRed HatUndertow: ajp request closes connection exceeding maxrequestsize7.5 Higheap7-undertowRed HatWildfly-core: management user rbac permission allows unexpected reading of system-properties to an unauthorized actor6.5 Mediumeap7-undertowRed HatNetty has unbounded pre-allocation in RedisArrayAggregator from RESP array length7.5 Higheap7-undertowRed HatNetty's wrapping plain trust manager silently disables hostname verification7.5 Higheap7-undertowRed HatNetty HAProxy: Unbalanced Reference Count in Nested PP2_TYPE_SSL TLV Parsing Leads to Memory Exhaustion8.7 Higheap7-undertowRed Hatnetty-codec-http2: ByteBuf Reference-Count Leak in DelegatingDecompressorFrameListener Leads to Memory Exhaustion5.3 Mediumeap7-undertowRed HatNetty's Lack of Lifecycle Cleanup Leads to Pooled ByteBuf Leak in RedisArrayAggregator8.7 Higheap7-undertowRed HatNetty has Insufficient Bailiwick Validation for NS Records8.7 Higheap7-undertowRed HatNetty: SCTP reassembly nests buffers without bound7.5 Higheap7-undertowRed HatNetty Vulnerable to DNS Cache Poisoning via Missing Bailiwick Checks in CNAME Records8.7 Higheap7-undertowRed HatNetty: SNI handler pre-allocates up to 16 MiB from nine attacker bytes7.5 Higheap7-undertowRed HatNetty: HAProxy SSL TLV parsing leaks retained slice on invalid TLV length7.5 Higheap7-undertowRed HatNetty has Unbounded Direct Memory Consumption in its RedisDecoder7.5 Higheap7-undertowRed HatNetty: Memory Exhaustion in RedisArrayAggregator due to Deeply Nested Arrays7.5 Higheap7-undertowRed HatNetty has an IPv6 Subnet Filter Bypass via Incorrect Comparator Masking8.1 Higheap7-undertowRed HatNetty: HttpContentDecompressor maxAllocation bypass via Content-Encoding: br/zstd/snappy enables decompression bomb DoS7.5 Higheap7-undertowRed HatNetty: HTTP Request Smuggling due to malformed Transfer-Encoding6.5 Mediumeap7-undertowRed HatNetty: HttpClientCodec response desynchronization7.3 Higheap7-undertowRed HatNetty: HTTP/1.0 TE+CL Coexistence Bypasses Smuggling Sanitization5.8 Mediumeap7-undertowRed HatNetty: DNS Codec Input Validation Bypass in Netty (Encoder + Decoder)7.5 Higheap7-undertowRed HatNetty: HTTP Header Injection via HttpProxyHandler Disabled Validation2.9 Loweap7-undertowRed HatNetty vulnerable to HTTP request smuggling and RTSP request injection via DefaultHttpRequest.setUri()5.3 Mediumeap7-undertowRed HatNetty MadeYouReset HTTP/2 DDoS Vulnerability8.2 Higheap7-undertowRed HatNetty HttpPostRequestDecoder can OOM5.3 Mediumeap7-undertowRed HatApache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK7.5 Higheap7-undertowRed HatUndertow: outofmemoryerror due to @multipartconfig handling7.5 Higheap7-undertowRed HatEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations7.5 Higheap7-undertowRed HatApache MINA SSHD: Information disclosure bugs with RootedFilesystem5.0 Mediumeap7-undertowRed HatBouncy Castle For Java LDAP injection vulnerability5.3 Mediumeap7-undertowRed Hattough-cookie Prototype Pollution vulnerability6.5 Mediumeap7-undertowRed Hatsemver vulnerable to Regular Expression Denial of Service5.3 Mediumeap7-undertowRed Hatnetty-handler SniHandler 16MB allocation6.5 Mediumeap7-undertowRed HatUse of temporary directory for file creation in `FileBackedOutputStream` in Guava5.5 Mediumeap7-undertowRed HatCookie parsing of quoted values can exfiltrate values from other cookies in Eclipse Jetty2.4 Loweap7-undertowRed HatOutOfMemoryError for large multipart without filename in Eclipse Jetty5.3 Mediumeap7-undertowRed HatUndertow: infinite loop in sslconduit during close7.5 Higheap7-undertowRed Hatjackson-databind possible Denial of Service if using JDK serialization to serialize JsonNode7.5 Higheap7-undertowRed HatInfinite recursion in Jettison leads to denial of service when creating a crafted JSONArray5.9 Mediumeap7-undertowRed HatApache Log4j 1.x (EOL) allows DoS in Chainsaw and SocketAppender7.5 Higheap7-undertowRed HatUndertow client not checking server identity presented by server certificate in https connections7.5 Higheap7-undertowRed HatInsecure Temporary File in RESTEasy5.5 Mediumeap7-undertowRed HatWildfly-elytron possibly vulnerable to timing attacks via use of unsafe comparator7.4 High- Show moreLoading…