TI-2023-19922 CVE-2023-38545 · GHSA-7xw9-w465-6x42
Out-of-bounds write in curl
Priority HIGH 83
This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake.
RHSA-2024:0797
Satellite 6.14.2 Async Security Update
Released 2024-02-13 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Satellite 6.14 for RHEL 8 candlepin-4.3.11-1.el8sat, candlepin-selinux-4.3.11-1.el8sat, mosquitto-2.0.17-1.el8sat +5
Fixes 10 records
TI-2023-21048 CVE-2023-40175 · GHSA-68xg-gqqm-vgj8
Inconsistent Interpretation of HTTP Requests in puma
Priority MEDIUM 50
Puma is a Ruby/Rack web server built for parallelism.
TI-2023-12912 CVE-2023-28366 · GHSA-897v-899r-j3hg
The broker in Eclipse Mosquitto 1.3.2 through 2.x before 2.0.16 has a memory leak that…
Priority MEDIUM 41
The broker in Eclipse Mosquitto 1.3.2 through 2.x before 2.0.16 has a memory leak that can be abused remotely when a client sends many QoS 2 messages with duplicate message IDs, and fails to respond to PUBREC commands.
TI-2023-11365 CVE-2023-26141 · GHSA-3qc2-v3hp-6cv8
Uncontrolled resource consumption in sidekiq
Priority MEDIUM 41
Versions of the package sidekiq before 7.1.3 are vulnerable to Denial of Service (DoS) due to insufficient checks in the dashboard-charts.js file.
TI-2023-04410 CVE-2023-4785 · GHSA-p25m-jpj4-qcrr
Denial of Service in gRPC Core
Priority MEDIUM 40
Lack of error handling in the TCP server in Google's gRPC starting version 1.23 on posix-compatible platforms (ex.
TI-2023-03353 CVE-2023-3592 · GHSA-p7q8-377q-px25
Memory leak in Eclipse Foundation Mosquitto
Priority LOW 34
In Mosquitto before 2.0.16, a memory leak occurs when clients send v5 CONNECT packets with a will message that contains invalid property types.
TI-2023-21041 CVE-2023-40167 · GHSA-hmr7-m48g-48f6
Jetty accepts "+" prefixed value in Content-Length
Priority LOW 33
Jetty is a Java based web server and servlet engine.
TI-2023-00767 CVE-2023-0809 · GHSA-v9xr-r3xx-x9gc
Resource allocation without limits in Eclipse Foundation Mosquitto
Priority LOW 33
In Mosquitto before 2.0.16, excessive memory is allocated based on malicious initial packets that are not CONNECT packets.
TI-2023-11283 CVE-2023-26049 · GHSA-p26g-97m4-6q7c
Cookie parsing of quoted values can exfiltrate values from other cookies in Eclipse Jetty
Priority LOW 27
Jetty is a java based web server and servlet engine.
TI-2023-18320 CVE-2023-36479 · GHSA-3gh6-v5v9-6v9j
Jetty vulnerable to errant command quoting in CGI Servlet
Priority LOW 19
Eclipse Jetty Canonical Repository is the canonical repository for the Jetty project.