Red Hat Security Advisory

RHSA-2023:7617

Red Hat Build of Apache Camel for Quarkus 3.2.0 release (RHBQ 3.2.9.Final)

Released 2023-11-30 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat build of Apache Camel 4 for Quarkus 3

Fixes 2 records

TI-2023-20549 CVE-2023-39410 · GHSA-rhrv-645h-fjfh

Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK

MEDIUM 43

When deserializing untrusted or corrupted data, it is possible for a reader to consume memory beyond the allowed constraints and thus lead to out of memory on the system.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02221 Published 2023-09-29 Partial fix · 1.11.3 CWE-502

TI-2023-04667 CVE-2023-5072 · GHSA-4jq9-2xhw-jpx7

DoS Vulnerability in JSON-Java

MEDIUM 42

Denial of Service in JSON-Java versions up to and including 20230618.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01741 Published 2023-10-12 Partial fix · 20231013 CWE-770