eap7-wildfly-modules vulnerabilities (Red Hat)
342 vulnerabilities.
eap7-wildfly-modulesRed HatWildfly: wildfly vulnerable to cross-site scripting (xss)6.1 Mediumeap7-wildfly-modulesRed HatApache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader4.3 Mediumeap7-wildfly-modulesRed HatApache Avro Java SDK: Arbitrary Code Execution when reading Avro schema (Java SDK)9.2 Criticaleap7-wildfly-modulesRed Hatjose4j is vulnerable to DoS via compressed JWE content7.5 Higheap7-wildfly-modulesRed HatUndertow: cookie smuggling/spoofing7.4 Higheap7-wildfly-modulesRed HatUndertow: unrestricted request storage leads to memory exhaustion7.5 Higheap7-wildfly-modulesRed HatStack overflow in Protocol Buffers Java Lite8.7 Higheap7-wildfly-modulesRed HatUndertow: improper state management in proxy protocol parsing causes information leakage7.5 Higheap7-wildfly-modulesRed HatUndertow: learningpushhandler can lead to remote memory dos attacks5.3 Mediumeap7-wildfly-modulesRed HatUndertow: response write hangs in case of java 17 tlsv1.3 newsessionticket7.5 Higheap7-wildfly-modulesRed HatMemory Exhaustion in braces7.5 Higheap7-wildfly-modulesRed HatBouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation.7.5 Higheap7-wildfly-modulesRed HatBouncy Castle crafted signature and public key can be used to trigger an infinite loop7.5 Higheap7-wildfly-modulesRed HatBouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack")5.9 Mediumeap7-wildfly-modulesRed HatWildfly: no timeout for eap management interface may lead to denial of service (dos)4.1 Mediumeap7-wildfly-modulesRed HatEap: wildfly-elytron has a ssrf security issue7.3 Higheap7-wildfly-modulesRed HatApache HTTP Server: HTTP/2 DoS by memory exhaustion on endless continuation frames7.5 Higheap7-wildfly-modulesRed HatXnio: stackoverflowexception when the chain of notifier states becomes problematically big7.5 Higheap7-wildfly-modulesRed HatApache CXF SSRF Vulnerability using the Aegis databinding9.3 Criticaleap7-wildfly-modulesRed HatUndertow: out-of-memory error after several closed connections with wildfly-http-client protocol7.5 Higheap7-wildfly-modulesRed HatUndertow: directory traversal vulnerability5.3 Mediumeap7-wildfly-modulesRed HatEap-galleon: custom provisioning creates unsecured http-invoker6.8 Mediumeap7-wildfly-modulesRed HatEap-7: heap exhaustion via deserialization7.5 Higheap7-wildfly-modulesRed Hatjose4j denial of service via specifically crafted JWE6.5 Mediumeap7-wildfly-modulesRed HatPrefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin5.9 Mediumeap7-wildfly-modulesRed HatUndertow: ajp request closes connection exceeding maxrequestsize7.5 Higheap7-wildfly-modulesRed HatWildfly-core: management user rbac permission allows unexpected reading of system-properties to an unauthorized actor6.5 Mediumeap7-wildfly-modulesRed HatApache Santuario: Private Key disclosure in debug-log output6.5 Mediumeap7-wildfly-modulesRed HatNetty has unbounded pre-allocation in RedisArrayAggregator from RESP array length7.5 Higheap7-wildfly-modulesRed HatNetty's wrapping plain trust manager silently disables hostname verification7.5 Higheap7-wildfly-modulesRed HatNetty HAProxy: Unbalanced Reference Count in Nested PP2_TYPE_SSL TLV Parsing Leads to Memory Exhaustion8.7 Higheap7-wildfly-modulesRed Hatnetty-codec-http2: ByteBuf Reference-Count Leak in DelegatingDecompressorFrameListener Leads to Memory Exhaustion5.3 Mediumeap7-wildfly-modulesRed HatNetty's Lack of Lifecycle Cleanup Leads to Pooled ByteBuf Leak in RedisArrayAggregator8.7 Higheap7-wildfly-modulesRed HatNetty has Insufficient Bailiwick Validation for NS Records8.7 Higheap7-wildfly-modulesRed HatNetty: SCTP reassembly nests buffers without bound7.5 Higheap7-wildfly-modulesRed HatNetty Vulnerable to DNS Cache Poisoning via Missing Bailiwick Checks in CNAME Records8.7 Higheap7-wildfly-modulesRed HatNetty: SNI handler pre-allocates up to 16 MiB from nine attacker bytes7.5 Higheap7-wildfly-modulesRed HatNetty: HAProxy SSL TLV parsing leaks retained slice on invalid TLV length7.5 Higheap7-wildfly-modulesRed HatNetty has Unbounded Direct Memory Consumption in its RedisDecoder7.5 Higheap7-wildfly-modulesRed HatNetty: Memory Exhaustion in RedisArrayAggregator due to Deeply Nested Arrays7.5 Higheap7-wildfly-modulesRed HatNetty has an IPv6 Subnet Filter Bypass via Incorrect Comparator Masking8.1 Higheap7-wildfly-modulesRed HatNetty: HttpContentDecompressor maxAllocation bypass via Content-Encoding: br/zstd/snappy enables decompression bomb DoS7.5 Higheap7-wildfly-modulesRed HatNetty: HTTP Request Smuggling due to malformed Transfer-Encoding6.5 Mediumeap7-wildfly-modulesRed HatNetty: HttpClientCodec response desynchronization7.3 Higheap7-wildfly-modulesRed HatNetty: Lz4FrameDecoder resource exhaustion7.5 Higheap7-wildfly-modulesRed HatNetty: HTTP/1.0 TE+CL Coexistence Bypasses Smuggling Sanitization5.8 Mediumeap7-wildfly-modulesRed HatNetty: DNS Codec Input Validation Bypass in Netty (Encoder + Decoder)7.5 Higheap7-wildfly-modulesRed HatNetty: HTTP Header Injection via HttpProxyHandler Disabled Validation2.9 Loweap7-wildfly-modulesRed HatNetty vulnerable to HTTP request smuggling and RTSP request injection via DefaultHttpRequest.setUri()5.3 Mediumeap7-wildfly-modulesRed HatNetty MadeYouReset HTTP/2 DDoS Vulnerability8.2 High- Show moreLoading…