Red Hat Security Advisory

RHSA-2024:0148

Red Hat Integration Camel K 1.10.5 release and security update

Released 2024-01-10 · Red Hat rating Important · View on Red Hat →

Fixed in

RHINT Camel-K 1.10.5

Fixes 3 records

TI-2023-17281 CVE-2023-34455 · GHSA-qcwq-55hx-v3vh

snappy-java's unchecked chunk length leads to DoS

HIGH 72

snappy-java is a fast compressor/decompressor for Java.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01762 Published 2023-06-15 Partial fix · 1.1.10.1 CWE-770

TI-2023-04667 CVE-2023-5072 · GHSA-4jq9-2xhw-jpx7

DoS Vulnerability in JSON-Java

MEDIUM 42

Denial of Service in JSON-Java versions up to and including 20230618.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01741 Published 2023-10-12 Partial fix · 20231013 CWE-770

TI-2023-17287 CVE-2023-34462 · GHSA-6mjq-h674-j845

netty-handler SniHandler 16MB allocation

LOW 34

Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.02459 Published 2023-06-22 Partial fix · 4.1.94.Final CWE-400