Read the docs
Red Hat Security Advisory

RHSA-2024:9571

Streams for Apache Kafka 2.8.0 release and security update

Released 2024-11-13 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Fixes 6 records

TI-2024-19207 CVE-2024-29025 · GHSA-5jpm-x58v-624v

Netty HttpPostRequestDecoder can OOM

Priority MEDIUM 63

Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0138 Published 2024-03-25 Partial fix · 4.1.108.Final CWE-770
TI-2024-06719 CVE-2024-7254 · GHSA-735f-pc8j-v9w8

Stack overflow in Protocol Buffers Java Lite

Priority MEDIUM 49

Any project that parses untrusted Protocol Buffers data containing an arbitrary number of nested groups / series of SGROUP tags can corrupted by exceeding the stack limit i.e.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.02772 Published 2024-09-19 Partial fix · 28.2, 3.25.5 +2 CWE-400
TI-2024-09116 CVE-2024-9823 · GHSA-j26w-f9rq-mr2q

Jetty DOS vulnerability on DosFilter

Priority MEDIUM 41

There exists a security vulnerability in Jetty's DosFilter which can be exploited by unauthorized users to cause remote denial-of-service (DoS) attack on the server using DosFilter.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0094 Published 2024-10-14 Partial fix · 9.4.54, 10.0.18 +2 CWE-400
TI-2024-07591 CVE-2024-8184 · GHSA-g8m5-722r-8whq

Jetty ThreadLimitHandler.getRemote() vulnerable to remote DoS attacks

Priority LOW 31

There exists a security vulnerability in Jetty's ThreadLimitHandler.getRemote() which can be exploited by unauthorized users to cause remote denial-of-service (DoS) attack.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0103 Published 2024-10-14 Partial fix · 12.0.9, 10.0.24 +2 CWE-400