TI-2023-23368 CVE-2023-43642 · GHSA-55g7-9cwv-5qfv
Missing upper bound check on chunk length in snappy-java
Priority HIGH 72
snappy-java is a Java port of the snappy, a fast C++ compresser/decompresser developed by Google.
RHSA-2023:7700
Red Hat build of Quarkus 2.13.9 release and security update
Released 2023-12-07 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat build of Quarkus 2.13.9
Fixes 11 records
TI-2023-17281 CVE-2023-34455 · GHSA-qcwq-55hx-v3vh
snappy-java's unchecked chunk length leads to DoS
Priority HIGH 72
snappy-java is a fast compressor/decompressor for Java.
TI-2023-17280 CVE-2023-34454 · GHSA-fjpj-2g6w-x25r
snappy-java's Integer Overflow vulnerability in compress leads to DoS
Priority HIGH 66
snappy-java is a fast compressor/decompressor for Java.
TI-2023-17279 CVE-2023-34453 · GHSA-pqr6-cmr2-h8hf
snappy-java's Integer Overflow vulnerability in shuffle leads to DoS
Priority HIGH 66
snappy-java is a fast compressor/decompressor for Java.
TI-2023-20549 CVE-2023-39410 · GHSA-rhrv-645h-fjfh
Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK
Priority MEDIUM 43
When deserializing untrusted or corrupted data, it is possible for a reader to consume memory beyond the allowed constraints and thus lead to out of memory on the system.
TI-2023-05869 CVE-2023-6394 · GHSA-mvc8-6ffp-jrx5
Quarkus: graphql operations over websockets bypass
Priority MEDIUM 43
A flaw was found in Quarkus.
TI-2023-15127 CVE-2023-31582 · GHSA-7g24-qg88-p43q
jose4j before v0.9.3 allows attackers to set a low iteration count of 1000 or less.
Priority MEDIUM 40
jose4j before v0.9.3 allows attackers to set a low iteration count of 1000 or less.
TI-2023-17287 CVE-2023-34462 · GHSA-6mjq-h674-j845
netty-handler SniHandler 16MB allocation
Priority LOW 34
Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients.
TI-2023-02788 CVE-2023-2976 · GHSA-7g45-4rm6-3mm3
Use of temporary directory for file creation in `FileBackedOutputStream` in Guava
Priority LOW 33
Use of Java's default temporary directory for file creation in `FileBackedOutputStream` in Google Guava versions 1.0 to 31.1 on Unix systems and Android Ice Cream Sandwich allows other users and apps on the machine with…
TI-2023-17957 CVE-2023-35887 · GHSA-mjmq-gwgm-5qhm
Apache MINA SSHD: Information disclosure bugs with RootedFilesystem
Priority LOW 25
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache MINA.
TI-2023-05868 CVE-2023-6393 · GHSA-xfv5-jqgp-vqhj
Quarkus: potential invalid reuse of context when @cacheresult on a uni is used
Priority LOW 25
A flaw was found in the Quarkus Cache Runtime.