Red Hat Security AdvisoryRHSA-2024:7052
Red Hat Build of Apache Camel 4.4 for Quarkus 3.8 update is now available (RHBQ 3.8.6.GA)
Released 2024-09-24 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat build of Apache Camel 4 for Quarkus 3
Fixes 5 records
Priority MEDIUM 42
An improper input validation of the p2c parameter in the Apache CXF JOSE code before 4.0.5, 3.6.4 and 3.5.9 allows an attacker to perform a denial of service attack by specifying a large value for this parameter in a tok…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01314 · Published 2024-07-19 · Partial fix · 4.0.5, 3.6.4 +1 CWE-20
Priority MEDIUM 41
In versions of Apache CXF before 3.6.4 and 4.0.5 (3.5.x and lower versions are not impacted), a CXF HTTP client conduit may prevent HTTPClient instances from being garbage collected and it is possible that memory consump…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01197 · Published 2024-07-19 · Partial fix · 3.6.4, 4.0.5 CWE-401
Priority LOW 39
The HL7 FHIR Core Artifacts repository provides the java core object handling code, with utilities (including validator), for the Fast Healthcare Interoperability Resources (FHIR) specification.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.00975 · Published 2024-09-06 · Partial fix · 6.3.23 CWE-611
Priority LOW 37
In Eclipse Vert.x version 4.3.0 to 4.5.9, the gRPC server does not limit the maximum length of message payload (Maven GAV: io.vertx:vertx-grpc-server and io.vertx:vertx-grpc-client).
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.0058 · Published 2024-09-04 · Partial fix · 4.5.10 CWE-770
Priority LOW 28
Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.0083 · Published 2024-06-11 · Partial fix · 1.6.0, 1.11.4 +9 CWE-362