TI-2019-07494 CVE-2019-10173 · GHSA-hf23-9pf7-388p
Code injection in xstream
Priority CRITICAL 86
It was found that xstream API version 1.4.10 before 1.4.11 introduced a regression for a previous deserialization flaw.
RHSA-2019:4352
Red Hat JBoss Fuse/A-MQ 6.3 R14 security and bug fix update
Released 2019-12-19 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Fuse 6.3
Fixes 7 records
TI-2019-06950 CVE-2019-9515 · GHSA-9259-5376-vjcj
Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a…
Priority HIGH 75
Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service.
TI-2019-06949 CVE-2019-9514 · GHSA-39qc-96h7-956f
Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a…
Priority HIGH 74
Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service.
TI-2019-06947 CVE-2019-9512 · GHSA-hgr8-6h9x-f7q9
Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a…
Priority HIGH 74
Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service.
TI-2019-09232 CVE-2019-12384 · GHSA-mph4-vhrx-mv67
FasterXML jackson-databind 2.x before 2.9.9.1 might allow attackers to have a variety of…
Priority MEDIUM 62
FasterXML jackson-databind 2.x before 2.9.9.1 might allow attackers to have a variety of impacts by leveraging failure to block the logback-core class from polymorphic deserialization.
TI-2019-06953 CVE-2019-9518 · GHSA-93p3-5r25-4p75
Some HTTP/2 implementations are vulnerable to a flood of empty frames, potentially…
Priority MEDIUM 54
Some HTTP/2 implementations are vulnerable to a flood of empty frames, potentially leading to a denial of service.
TI-2019-00177 CVE-2019-0201 · GHSA-2hw2-62cp-p9p7
Missing authorization in Apache ZooKeeper
Priority LOW 39
An issue is present in Apache ZooKeeper 1.0.0 to 3.4.13 and 3.5.0-alpha to 3.5.4-beta.