Read the docs
Red Hat Security Advisory

RHSA-2024:2088

Red Hat build of Cryostat security update

Released 2024-04-29 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 6 records

TI-2023-24278 CVE-2023-45288 · GHSA-4v7x-pqxf-cx7m

HTTP/2 CONTINUATION flood in net/http

Priority HIGH 81

An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.89455 Published 2024-04-04 Partial fix · 1.21.9, 1.22.2 +1 CWE-400
TI-2024-19207 CVE-2024-29025 · GHSA-5jpm-x58v-624v

Netty HttpPostRequestDecoder can OOM

Priority MEDIUM 63

Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0138 Published 2024-03-25 Partial fix · 4.1.108.Final CWE-770
TI-2023-24280 CVE-2023-45290 · GHSA-rr6r-cfgf-gc6h

Memory exhaustion in multipart form parsing in net/textproto and net/http

Priority LOW 31

When parsing a multipart form (either explicitly with Request.ParseMultipartForm or implicitly with Request.FormValue, Request.PostFormValue, or Request.FormFile), limits on the total size of the parsed form were not app…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01165 Published 2024-03-05 Partial fix · 1.21.8, 1.22.1 CWE-770