Read the docs
Red Hat Security Advisory

RHSA-2023:0189

Red Hat AMQ Streams 2.3.0 release and security update

Released 2023-01-17 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 6 records

TI-2022-18262 CVE-2022-38752 · GHSA-9w3m-gqgf-c4p9

DoS in SnakeYAML

Priority MEDIUM 62

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02695 Published 2022-09-05 Partial fix · 1.32 CWE-121
TI-2022-20342 CVE-2022-42003 · GHSA-jjjh-jjxp-wpff

In FasterXML jackson-databind before versions 2.13.4.1 and 2.12.17.1, resource exhaustion…

Priority LOW 39

In FasterXML jackson-databind before versions 2.13.4.1 and 2.12.17.1, resource exhaustion can occur because of a lack of a check in primitive value deserializers to avoid deep wrapper array nesting, when the UNWRAP_SINGL…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03409 Published 2022-10-02 Partial fix · 2.12.7.1, 2.13.4.2 CWE-502
TI-2022-01897 CVE-2022-2048 · GHSA-wgmr-mf83-7x4j

Uncontrolled resource consumption in Eclipse Jetty

Priority LOW 38

In Eclipse Jetty HTTP/2 server implementation, when encountering an invalid HTTP/2 request, the error handling has a bug that can wind up not properly cleaning up the active connections and associated resources.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02562 Published 2022-07-07 Partial fix · 9.4.47, 10.0.10 +1 CWE-410
TI-2022-01896 CVE-2022-2047 · GHSA-cj7v-27pg-wf7q

Improper input validation in Eclipse Jetty

Priority LOW 16

In Eclipse Jetty versions 9.4.0 thru 9.4.46, and 10.0.0 thru 10.0.9, and 11.0.0 thru 11.0.9 versions, the parsing of the authority segment of an http scheme URI, the Jetty HttpURI class improperly detects an invalid inpu…

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.01324 Published 2022-07-07 Partial fix · 9.4.47, 10.0.10 +1 CWE-20