Red Hat Security Advisory

RHSA-2023:7488

Red Hat Single Sign-On 7.6.6 security update

Released 2023-11-24 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Single Sign-On 7

Fixes 3 records

TI-2023-23979 CVE-2023-44487 · GHSA-qppj-fm5r-hxr3

The HTTP/2 protocol allows a denial of service (server resource consumption) because…

CRITICAL 90KEV

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.99999 Published 2023-10-10 Partial fix · 1.28.0, 0.17.0 +9 CWE-400

TI-2023-00101 CVE-2023-0105 · GHSA-c7xw-p58w-h6fj

Improper authentication in Red Hat Keycloak

LOW 36

A flaw was found in Keycloak.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00719 Published 2023-01-11 Fixed in 22.0.1 CWE-287

TI-2023-16378 CVE-2023-33201 · GHSA-hr8g-6v94-x4m9

Bouncy Castle For Java before 1.74 is affected by an LDAP injection vulnerability.

LOW 25

Bouncy Castle For Java before 1.74 is affected by an LDAP injection vulnerability.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00772 Published 2023-07-05 Partial fix · 1.74 CWE-295