eap8-netty-transport-native-unix-common vulnerabilities (Red Hat)
85 vulnerabilities.
eap8-netty-transport-native-unix-commonRed Hathornetq vulnerable to file overwrite, sensitive information disclosure7.1 Higheap8-netty-transport-native-unix-commonRed Hatjose4j is vulnerable to DoS via compressed JWE content7.5 Higheap8-netty-transport-native-unix-commonRed HatBouncy Castle certificate parsing issues cause high CPU usage during parameter evaluation.7.5 Higheap8-netty-transport-native-unix-commonRed HatBouncy Castle crafted signature and public key can be used to trigger an infinite loop7.5 Higheap8-netty-transport-native-unix-commonRed HatBouncy Castle affected by timing side-channel for RSA key exchange ("The Marvin Attack")5.9 Mediumeap8-netty-transport-native-unix-commonRed HatJberet: jberet-core logging database credentials6.5 Mediumeap8-netty-transport-native-unix-commonRed HatEap: oidc app attempting to access the second tenant, the user should be prompted to log7.3 Higheap8-netty-transport-native-unix-commonRed HatEap: wildfly-elytron has a ssrf security issue7.3 Higheap8-netty-transport-native-unix-commonRed HatApache CXF SSRF Vulnerability using the Aegis databinding9.3 Criticaleap8-netty-transport-native-unix-commonRed HatEap-galleon: custom provisioning creates unsecured http-invoker6.8 Mediumeap8-netty-transport-native-unix-commonRed HatNetty: Memory Leak in DNS Record Decoder via Malformed Domain Names5.3 Mediumeap8-netty-transport-native-unix-commonRed HatNetty HttpContentEncoder: Unbounded Per-Connection Queue Growth via HTTP/1.1 Pipelining Leads to Denial of Service6.9 Mediumeap8-netty-transport-native-unix-commonRed HatNetty has a Security Control Bypass via CORS Short-Circuit Failure6.5 Mediumeap8-netty-transport-native-unix-commonRed HatNetty SpdyHttpDecoder: ByteBuf Reference Leak on RST_STREAM Leads to Native Memory Exhaustion8.7 Higheap8-netty-transport-native-unix-commonRed HatNetty SPDY zlib header block continues decoded expansion after maxHeaderSize truncation7.5 Higheap8-netty-transport-native-unix-commonRed HatNetty SPDY SETTINGS frame count materializes unbounded settings map7.5 Higheap8-netty-transport-native-unix-commonRed HatNetty's wrapping plain trust manager silently disables hostname verification7.5 Higheap8-netty-transport-native-unix-commonRed HatNetty has Insufficient Bailiwick Validation for NS Records8.7 Higheap8-netty-transport-native-unix-commonRed HatNetty Vulnerable to DNS Cache Poisoning via Missing Bailiwick Checks in CNAME Records8.7 Higheap8-netty-transport-native-unix-commonRed HatNetty: SNI handler pre-allocates up to 16 MiB from nine attacker bytes7.5 Higheap8-netty-transport-native-unix-commonRed HatNetty has an IPv6 Subnet Filter Bypass via Incorrect Comparator Masking8.1 Higheap8-netty-transport-native-unix-commonRed HatNetty: HttpContentDecompressor maxAllocation bypass via Content-Encoding: br/zstd/snappy enables decompression bomb DoS7.5 Higheap8-netty-transport-native-unix-commonRed HatNetty: HTTP Request Smuggling due to malformed Transfer-Encoding6.5 Mediumeap8-netty-transport-native-unix-commonRed HatNetty: HttpClientCodec response desynchronization7.3 Higheap8-netty-transport-native-unix-commonRed HatNetty: HTTP/1.0 TE+CL Coexistence Bypasses Smuggling Sanitization5.8 Mediumeap8-netty-transport-native-unix-commonRed HatNetty: DNS Codec Input Validation Bypass in Netty (Encoder + Decoder)7.5 Higheap8-netty-transport-native-unix-commonRed HatNetty: HTTP Header Injection via HttpProxyHandler Disabled Validation2.9 Loweap8-netty-transport-native-unix-commonRed HatNetty HTTP/2 CONTINUATION Frame Flood DoS via Zero-Byte Frame Bypass8.7 Higheap8-netty-transport-native-unix-commonRed HatNetty: HTTP Request Smuggling via Chunked Extension Quoted-String Parsing7.5 Higheap8-netty-transport-native-unix-commonRed HatNetty is vulnerable to request smuggling due to incorrect parsing of chunk extensions2.9 Loweap8-netty-transport-native-unix-commonRed HatNetty MadeYouReset HTTP/2 DDoS Vulnerability8.2 Higheap8-netty-transport-native-unix-commonRed HatDenial of Service attack on windows app using Netty5.5 Mediumeap8-netty-transport-native-unix-commonRed HatSslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine7.5 Higheap8-netty-transport-native-unix-commonRed HatDenial of Service attack on windows app using Netty5.5 Mediumeap8-netty-transport-native-unix-commonRed HatNetty HttpPostRequestDecoder can OOM5.3 Medium