eap7-wildfly vulnerabilities (Red Hat)
342 vulnerabilities.
eap7-wildflyRed HatWildfly: wildfly vulnerable to cross-site scripting (xss)6.1 Mediumeap7-wildflyRed HatApache Commons IO: Possible denial of service attack on untrusted input to XmlStreamReader4.3 Mediumeap7-wildflyRed HatApache Avro Java SDK: Arbitrary Code Execution when reading Avro schema (Java SDK)9.2 Criticaleap7-wildflyRed Hatjose4j is vulnerable to DoS via compressed JWE content7.5 Higheap7-wildflyRed HatUndertow: cookie smuggling/spoofing7.4 Higheap7-wildflyRed HatUndertow: unrestricted request storage leads to memory exhaustion7.5 Higheap7-wildflyRed HatStack overflow in Protocol Buffers Java Lite8.7 Higheap7-wildflyRed HatUndertow: improper state management in proxy protocol parsing causes information leakage7.5 Higheap7-wildflyRed HatUndertow: learningpushhandler can lead to remote memory dos attacks5.3 Mediumeap7-wildflyRed HatUndertow: response write hangs in case of java 17 tlsv1.3 newsessionticket7.5 Higheap7-wildflyRed HatMemory Exhaustion in braces7.5 Higheap7-wildflyRed HatBouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation.7.5 Higheap7-wildflyRed HatBouncy Castle crafted signature and public key can be used to trigger an infinite loop7.5 Higheap7-wildflyRed HatBouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack")5.9 Mediumeap7-wildflyRed HatWildfly: no timeout for eap management interface may lead to denial of service (dos)4.1 Mediumeap7-wildflyRed HatEap: wildfly-elytron has a ssrf security issue7.3 Higheap7-wildflyRed HatApache HTTP Server: HTTP/2 DoS by memory exhaustion on endless continuation frames7.5 Higheap7-wildflyRed HatXnio: stackoverflowexception when the chain of notifier states becomes problematically big7.5 Higheap7-wildflyRed HatApache CXF SSRF Vulnerability using the Aegis databinding9.3 Criticaleap7-wildflyRed HatUndertow: out-of-memory error after several closed connections with wildfly-http-client protocol7.5 Higheap7-wildflyRed HatUndertow: directory traversal vulnerability5.3 Mediumeap7-wildflyRed HatEap-galleon: custom provisioning creates unsecured http-invoker6.8 Mediumeap7-wildflyRed HatEap-7: heap exhaustion via deserialization7.5 Higheap7-wildflyRed Hatjose4j denial of service via specifically crafted JWE6.5 Mediumeap7-wildflyRed HatPrefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin5.9 Mediumeap7-wildflyRed HatUndertow: ajp request closes connection exceeding maxrequestsize7.5 Higheap7-wildflyRed HatWildfly-core: management user rbac permission allows unexpected reading of system-properties to an unauthorized actor6.5 Mediumeap7-wildflyRed HatApache Santuario: Private Key disclosure in debug-log output6.5 Mediumeap7-wildflyRed HatNetty has unbounded pre-allocation in RedisArrayAggregator from RESP array length7.5 Higheap7-wildflyRed HatNetty's wrapping plain trust manager silently disables hostname verification7.5 Higheap7-wildflyRed HatNetty HAProxy: Unbalanced Reference Count in Nested PP2_TYPE_SSL TLV Parsing Leads to Memory Exhaustion8.7 Higheap7-wildflyRed Hatnetty-codec-http2: ByteBuf Reference-Count Leak in DelegatingDecompressorFrameListener Leads to Memory Exhaustion5.3 Mediumeap7-wildflyRed HatNetty's Lack of Lifecycle Cleanup Leads to Pooled ByteBuf Leak in RedisArrayAggregator8.7 Higheap7-wildflyRed HatNetty has Insufficient Bailiwick Validation for NS Records8.7 Higheap7-wildflyRed HatNetty: SCTP reassembly nests buffers without bound7.5 Higheap7-wildflyRed HatNetty Vulnerable to DNS Cache Poisoning via Missing Bailiwick Checks in CNAME Records8.7 Higheap7-wildflyRed HatNetty: SNI handler pre-allocates up to 16 MiB from nine attacker bytes7.5 Higheap7-wildflyRed HatNetty: HAProxy SSL TLV parsing leaks retained slice on invalid TLV length7.5 Higheap7-wildflyRed HatNetty has Unbounded Direct Memory Consumption in its RedisDecoder7.5 Higheap7-wildflyRed HatNetty: Memory Exhaustion in RedisArrayAggregator due to Deeply Nested Arrays7.5 Higheap7-wildflyRed HatNetty has an IPv6 Subnet Filter Bypass via Incorrect Comparator Masking8.1 Higheap7-wildflyRed HatNetty: HttpContentDecompressor maxAllocation bypass via Content-Encoding: br/zstd/snappy enables decompression bomb DoS7.5 Higheap7-wildflyRed HatNetty: HTTP Request Smuggling due to malformed Transfer-Encoding6.5 Mediumeap7-wildflyRed HatNetty: HttpClientCodec response desynchronization7.3 Higheap7-wildflyRed HatNetty: Lz4FrameDecoder resource exhaustion7.5 Higheap7-wildflyRed HatNetty: HTTP/1.0 TE+CL Coexistence Bypasses Smuggling Sanitization5.8 Mediumeap7-wildflyRed HatNetty: DNS Codec Input Validation Bypass in Netty (Encoder + Decoder)7.5 Higheap7-wildflyRed HatNetty: HTTP Header Injection via HttpProxyHandler Disabled Validation2.9 Loweap7-wildflyRed HatNetty vulnerable to HTTP request smuggling and RTSP request injection via DefaultHttpRequest.setUri()5.3 Mediumeap7-wildflyRed HatNetty MadeYouReset HTTP/2 DDoS Vulnerability8.2 High- Show moreLoading…