Read the docs
Red Hat Security Advisory

RHSA-2024:0530

Red Hat build of Cryostat security update

Released 2024-01-25 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 2 records

TI-2023-03751 CVE-2023-4043 · GHSA-g8p6-p27c-52fx

Parsson DoS when parsing numbers from untrusted sources

Priority LOW 35

In Eclipse Parsson before versions 1.1.4 and 1.0.5, Parsing JSON from untrusted sources can lead malicious actors to exploit the fact that the built-in support for parsing numbers with large scale in Java has a number of…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0089 Published 2023-11-03 Partial fix · 1.0.5, 1.1.4 CWE-20
TI-2023-20467 CVE-2023-39326 · GHSA-9f76-wg39-x86h

Denial of service via chunk extensions in net/http

Priority LOW 26

A malicious HTTP sender can use chunk extensions to cause a receiver reading from a request or response body to read many more bytes from the network than are in the body.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01208 Published 2023-12-06 Partial fix · 1.20.12, 1.21.5