Read the docs
Red Hat Security Advisory

RHSA-2025:2416

Streams for Apache Kafka 2.9.0 release and security update

Released 2025-03-05 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 7 records

TI-2024-31824 CVE-2024-47535 · GHSA-xq3w-v528-46rv

Denial of Service attack on windows app using Netty

Priority MEDIUM 58

Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00408 Published 2024-11-12 Fixed in 4.1.115, 4.1.115.Final CWE-400
TI-2024-16308 CVE-2024-24791 · GHSA-hw49-2p59-3mhj

Denial of service due to improper 100-continue handling in net/http

Priority MEDIUM 42

The net/http HTTP/1.1 client mishandled the case where a server responds to a request with an "Expect: 100-continue" header with a non-informational (200 or higher) status.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01414 Published 2024-07-02 Partial fix · 1.21.12, 1.22.5
TI-2023-28776 CVE-2023-52428 · GHSA-gvpg-vgmx-xg6w

In Connect2id Nimbus JOSE+JWT before 9.37.2, an attacker can cause a denial of service…

Priority MEDIUM 40

In Connect2id Nimbus JOSE+JWT before 9.37.2, an attacker can cause a denial of service (resource consumption) via a large JWE p2c header value (aka iteration count) for the PasswordBasedDecrypter (PBKDF2) component.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00814 Published 2024-02-11 Partial fix · 9.37.2 CWE-770
TI-2024-08679 CVE-2024-9355 · GHSA-3h3x-2hwv-hr52

Golang-fips: golang fips zeroed buffer

Priority LOW 31

A vulnerability was found in Golang FIPS OpenSSL.

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00298 Published 2024-10-01 Partial fix · 0.10-2.el7_9, 8100020241001112709.a3795dee +19 CWE-457
TI-2024-07591 CVE-2024-8184 · GHSA-g8m5-722r-8whq

Jetty ThreadLimitHandler.getRemote() vulnerable to remote DoS attacks

Priority LOW 31

There exists a security vulnerability in Jetty's ThreadLimitHandler.getRemote() which can be exploited by unauthorized users to cause remote denial-of-service (DoS) attack.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0103 Published 2024-10-14 Partial fix · 12.0.9, 10.0.24 +2 CWE-400