Red Hat Security Advisory

RHSA-2025:0900

Red Hat build of Quarkus 3.15.3 release and security update

Released 2025-02-05 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat build of Quarkus 3.15.3

Fixes 2 records

TI-2024-31824 CVE-2024-47535 · GHSA-xq3w-v528-46rv

Denial of Service attack on windows app using Netty

MEDIUM 58

Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00408 Published 2024-11-12 Fixed in 4.1.115, 4.1.115.Final CWE-400

TI-2024-11501 CVE-2024-12397 · GHSA-cxrx-q234-m22m

Io.quarkus.http/quarkus-http-core: quarkus http cookie smuggling

LOW 36

A flaw was found in Quarkus-HTTP, which incorrectly parses cookies with certain value-delimiting characters in incoming requests.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00928 Published 2024-12-12 Partial fix · 5.3.4, 0.5.0-6 +3 CWE-444