Read the docs
Red Hat Security Advisory

RHSA-2023:1855

Red Hat JBoss EAP 7.4.10 XP 4.0.0.GA security release

Released 2023-04-18 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 3 records

TI-2022-03237 CVE-2022-3509 · GHSA-g5ww-5jh7-63cx

Parsing issue in protobuf textformat

Priority MEDIUM 41

A parsing issue similar to CVE-2022-3171, but with textformat in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3 can lead to a denial of service attack.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00967 Published 2022-11-01 Partial fix · 3.21.7, 3.20.3 +2 CWE-400
TI-2022-03238 CVE-2022-3510 · GHSA-4gg5-vx3j-xwc7

Parsing issue in protobuf message-type extension

Priority MEDIUM 40

A parsing issue similar to CVE-2022-3171, but with Message-Type Extensions in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3 can lead to a denial of service attack.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00717 Published 2022-11-11 Partial fix · 3.21.7, 3.20.3 +2 CWE-400