Red Hat Security Advisory

RHSA-2024:7811

Red Hat JBoss Enterprise Application Platform 7.4 Security update

Released 2024-10-08 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat JBoss EAP 7.4 for RHEL 7 Server eap7-avro-1.11.4-1.redhat_00001.1.el7eap
Red Hat JBoss EAP 7.4 for RHEL 8 eap7-avro-1.11.4-1.redhat_00001.1.el8eap
Red Hat JBoss EAP 7.4 for RHEL 9 eap7-avro-1.11.4-1.redhat_00001.1.el9eap

TI-2024-31848 CVE-2024-47561 · GHSA-r7pg-v2c8-mfg3

MEDIUM 47

Schema parsing in the Java SDK of Apache Avro 1.11.3 and previous versions allows bad actors to execute arbitrary code.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.03256 Published 2024-10-03 Partial fix · 1.11.4 CWE-502