Read the docs
Red Hat Security Advisory

RHSA-2023:0713

Red Hat Data Grid 8.4.1 security update

Released 2023-02-09 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 6 records

TI-2022-22144 CVE-2022-45047 · GHSA-fhw8-8j55-vwgq

Apache MINA SSHD: Java unsafe deserialization vulnerability

Priority HIGH 82

Class org.apache.sshd.server.keyprovider.SimpleGeneratorHostKeyProvider in Apache MINA SSHD <= 2.9.1 uses Java deserialization to load a serialized java.security.PrivateKey.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0381 Published 2022-11-16 Partial fix · 2.9.2 CWE-502
TI-2022-20222 CVE-2022-41881 · GHSA-fx2c-96vj-985v

Uncontrolled recursion in netty

Priority HIGH 72

Netty project is an event-driven asynchronous network application framework.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01577 Published 2022-12-12 Partial fix · 4.1.86.Final CWE-674
TI-2022-20342 CVE-2022-42003 · GHSA-jjjh-jjxp-wpff

In FasterXML jackson-databind before versions 2.13.4.1 and 2.12.17.1, resource exhaustion…

Priority LOW 39

In FasterXML jackson-databind before versions 2.13.4.1 and 2.12.17.1, resource exhaustion can occur because of a lack of a check in primitive value deserializers to avoid deep wrapper array nesting, when the UNWRAP_SINGL…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03409 Published 2022-10-02 Partial fix · 2.12.7.1, 2.13.4.2 CWE-502