Red Hat Security AdvisoryRHSA-2020:4252
Red Hat build of Quarkus 1.7.5 release and security update
Released 2020-10-14 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat build of Quarkus 1.7.5
Fixes 5 records
Priority MEDIUM 45
The ZlibDecoders in Netty 4.1.x before 4.1.46 allow for unbounded memory allocation while decoding a ZlibEncoded byte stream.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.09188 · Published 2020-04-07 · Partial fix · 4.1.46 CWE-770
Priority MEDIUM 43
A flaw was found in Keycloak before version 11.0.0, where the code base contains usages of ObjectInputStream without type checks.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02604 · Published 2020-05-13 · Partial fix · 11.0.0 CWE-20
Priority LOW 33
A flaw was found in Hibernate ORM in versions before 5.3.18, 5.4.18 and 5.5.0.Beta1.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.02126 · Published 2020-07-06 · Partial fix · 5.3.18, 5.4.18 +1 CWE-89
Priority LOW 29
A flaw was found in Hibernate Validator version 6.1.2.Final.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.02351 · Published 2020-05-06 · Partial fix · 6.1.5.Final, 6.0.20.Final CWE-20
Priority LOW 26
A vulnerability was found in all versions of Keycloak where, the pages on the Admin Console area of the application are completely missing general HTTP security headers in HTTP-responses.
CVSS 3.1MEDIUM 5.4· Network · No auth · User interaction · EPSS 0.00783 · Published 2020-04-06 · Partial fix CWE-358
THREATIST.IORead the docs