Read the docs
Red Hat Security Advisory

RHSA-2023:0469

Red Hat Integration Camel Extensions For Quarkus 2.13.2

Released 2023-01-26 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 7 records

TI-2022-19041 CVE-2022-40152 · GHSA-3f7h-mf4q-vrm4

Stack Buffer Overflow in Woodstox

Priority HIGH 66

Those using Woodstox to parse XML data may be vulnerable to Denial of Service attacks (DOS) if DTD support is enabled.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.18215 Published 2022-09-16 Partial fix · 6.4.0, 5.4.0 CWE-121
TI-2022-19040 CVE-2022-40151 · GHSA-f8cc-g7j8-xxpm

Stack Buffer Overflow in xstream

Priority HIGH 66

Those using Xstream to seralize XML data may be vulnerable to Denial of Service attacks (DOS).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02222 Published 2022-09-16 Partial fix · 1.4.20 CWE-121
Priority LOW 39

In FasterXML jackson-databind before versions 2.13.4.1 and 2.12.17.1, resource exhaustion can occur because of a lack of a check in primitive value deserializers to avoid deep wrapper array nesting, when the UNWRAP_SINGL…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03409 Published 2022-10-02 Partial fix · 2.12.7.1, 2.13.4.2 CWE-502
TI-2022-19039 CVE-2022-40150 · GHSA-x27m-9w8j-5vcw

Stack Buffer Overflow in Jettison

Priority LOW 36

Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks (DOS).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01647 Published 2022-09-16 Partial fix · 1.5.2 CWE-400
TI-2022-19038 CVE-2022-40149 · GHSA-56h3-78gp-v83r

Stack Buffer Overflow in Jettison

Priority LOW 36

Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks (DOS).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01677 Published 2022-09-16 Partial fix · 1.5.1 CWE-121