Red Hat Security Advisory

RHSA-2022:7896

Red Hat Integration Debezium 1.9.7 security update

Released 2022-11-09 · Red Hat rating Moderate · View on Red Hat →

Fixed in

RHINT Debezium 1.9.7

Fixes 2 records

TI-2021-05523 CVE-2021-22569 · GHSA-wrvw-hg22-4m67

Denial of Service of protobuf-java parsing procedure

HIGH 72

An issue in protobuf-java allowed the interleaving of com.google.protobuf.UnknownFieldSet fields in such a way that would be processed out of order.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01795 Published 2022-01-07 Partial fix · 3.16.1, 3.18.2 +1 CWE-696

TI-2022-02927 CVE-2022-3171 · GHSA-h4h5-3hr4-j3g2

Memory handling vulnerability in ProtocolBuffers Java core and lite

LOW 35

A parsing issue with binary data in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3 can lead to a denial of service attack.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01278 Published 2022-10-12 Fixed in 3.21.7, 3.20.3 +2 CWE-20