Red Hat Security Advisory

RHSA-2023:3373

Migration Toolkit for Runtimes security update

Released 2023-05-31 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Migration Toolkit for Runtimes 1 on RHEL 8 mtr/mtr-web-container-rhel8

Fixes 3 records

TI-2022-20222 CVE-2022-41881 · GHSA-fx2c-96vj-985v

Uncontrolled recursion in netty

HIGH 72

Netty project is an event-driven asynchronous network application framework.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01577 Published 2022-12-12 Partial fix · 4.1.86.Final CWE-674

TI-2021-21545 CVE-2021-46877 · GHSA-3x8x-79m2-3w2w

jackson-databind 2.10.x through 2.12.x before 2.12.6 and 2.13.x before 2.13.1 allows…

LOW 35

jackson-databind 2.10.x through 2.12.x before 2.12.6 and 2.13.x before 2.13.1 allows attackers to cause a denial of service (2 GB transient heap usage per read) in uncommon situations involving JsonNode JDK serialization…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01124 Published 2023-03-18 Partial fix · 2.12.6, 2.13.1 CWE-770

TI-2022-20206 CVE-2022-41854 · GHSA-w37g-rhq8-7m4j

Stack Overflow in Snakeyaml

LOW 32

Those using Snakeyaml to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS).

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01555 Published 2022-11-11 Partial fix · 1.32 CWE-121