kafka vulnerabilities (Ubuntu)
13 vulnerabilities.
-
kafkaUbuntu Apache Kafka: Denial of service via unbounded memory allocation when decoding compressed record batches 6.5 Medium -
kafkaUbuntu Apache Kafka: Unauthorized principal can read arbitrary broker files via IncrementalAlterConfigs 6.5 Medium -
kafkaUbuntu Apache Kafka: Connect Admin REST API Authentication Bypass via Unapplied REST Extensions 8.8 High -
kafkaUbuntu Apache Kafka: Denial of service in Kafka Streams and client deserializers via unbounded memory allocation 7.5 High -
kafkaUbuntu Apache Kafka: Kafka Streams StreamThread hang from integer overflow in stream-time punctuation 9.1 Critical -
kafkaUbuntu Apache Kafka: PushTelemetry (KIP-714) metrics payloads are decompressed without a size limit, allowing a broker out-of-memory denial of service 6.5 Medium -
kafkaUbuntu Apache Kafka: Broker silently skips JWT signature verification for SASL/OAUTHBEARER when the JWKS endpoint URL is not configured 9.1 Critical -
kafkaUbuntu Apache Kafka: Broker does not enforce JWT issuer and audience validation for SASL/OAUTHBEARER by default 5.9 Medium -
kafkaUbuntu Apache Kafka: Incorrect boolean operator in FetchSnapshot RPC handler allows authenticated network clients to crash the KRaft controller via a malformed request. 6.5 Medium -
kafkaUbuntu Apache Kafka: Missing JWT token validation in OAUTHBEARER authentication 9.1 Critical -
kafkaUbuntu Apache Kafka, Apache Kafka Clients: Information Exposure Through Network Client Log Output 5.3 Medium -
kafkaUbuntu Apache Kafka: Potential incorrect access control during migration from ZK mode to KRaft mode 7.4 High -
kafkaUbuntu Timing Attack Vulnerability for Apache Kafka Connect and Clients 5.9 Medium