Red Hat Security Advisory

RHSA-2024:6508

Red Hat Build of Apache Camel 4.4.2 for Spring Boot security update.

Released 2024-09-09 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat build of Apache Camel 4.4.2 for Spring Boot

Fixes 3 records

TI-2024-05534 CVE-2024-5971 · GHSA-xpp6-8r3j-ww43

Undertow: response write hangs in case of java 17 tlsv1.3 newsessionticket

MEDIUM 44

A vulnerability was found in Undertow, where the chunked response hangs after the body was flushed.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02921 Published 2024-07-08 Partial fix · 2.2.34.Final, 2.3.15.Final +4 CWE-674

TI-2024-07308 CVE-2024-7885 · GHSA-9623-mqmm-5rcf

Undertow: improper state management in proxy protocol parsing causes information leakage

LOW 38

A vulnerability was found in Undertow where the ProxyProtocolReadListener reuses the same StringBuilder instance across multiple requests.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02644 Published 2024-08-21 Partial fix · 2.2.36.Final, 2.3.17.Final +27 CWE-362

TI-2024-26035 CVE-2024-38808 · GHSA-9cmq-m9j5-mvww

CVE-2024-38808: Spring Expression DoS Vulnerability

LOW 21

In Spring Framework versions 5.3.0 - 5.3.38 and older unsupported versions, it is possible for a user to provide a specially crafted Spring Expression Language (SpEL) expression that may cause a denial of service (DoS) c…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00568 Published 2024-08-20 Partial fix · 5.3.39, 6.0+ CWE-770