Security
فارسی
All products

Red Hat Integration Camel K 1/undertow

Red Hat · Package
15 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Undertow denial of service vulnerabilityCVE-2023-1108 · GHSA-M4MM-PG93-FV78 io.undertow:undertow-coreRed Hat Integration Camel K 1/undertow MavenRed Hat High Fix reported
HTTP/2 Stream Cancellation AttackCVE-2023-44487 · GHSA-QPPJ-FM5R-HXR3 golang.org/x/netcom.typesafe.akka:akka-http-core GoMavenRed HatSwift Medium Fix reported
Undertow's url-encoded request path information can be broken on ajp-listenerCVE-2024-6162 · GHSA-9442-GM4V-R222 io.undertow:undertow-coreRed Hat Fuse 7/undertow MavenRed Hat High Fix reported
Undertow Servlets Vulnerable to Remote DoS via OutOfMemoryError when Passed Large Parameter NamesCVE-2024-4027 · GHSA-33HJ-RCMX-86MV io.undertow:undertow-coreRed Hat Fuse 7/undertow MavenRed Hat High Fix reported
Undertow vulnerable to Race ConditionCVE-2024-7885 · GHSA-9623-MQMM-5RCF io.undertow:undertow-coreRed Hat Build of Keycloak/undertow MavenRed Hat High Fix reported
Undertow Uncontrolled Resource ConsumptionCVE-2021-3629 · GHSA-RF6Q-VX79-MJXR io.undertow:undertow-coreRed Hat Integration Camel K 1/undertow MavenRed Hat High Fix reported
Undertow client not checking server identity presented by server certificate in https connectionsCVE-2022-4492 · GHSA-PFCC-3G6R-8RG8 io.undertow:undertow-coreRed Hat Data Grid 8/undertow MavenRed Hat Critical Fix reported
Undertow Missing Release of Memory after Effective Lifetime vulnerabilityCVE-2024-3653 · GHSA-CH7Q-GPFF-H9HP io.undertow:undertow-coreOpenShift Serverless/undertow MavenRed Hat Medium Fix reported
Undertow Denial of Service vulnerabilityCVE-2024-5971 · GHSA-XPP6-8R3J-WW43 io.undertow:undertow-coreRed Hat Fuse 7/undertow MavenRed Hat High Fix reported
Undertow vulnerable to denial of serviceCVE-2023-3223 · GHSA-65H2-WF7M-Q2V8 io.undertow:undertow-parentRed Hat Decision Manager 7/undertow MavenRed Hat High Fix reported
Undertow vulnerable to memory exhaustion due to buffer leakCVE-2021-3690 · GHSA-FJ7C-VG2V-CCRM io.undertow:undertow-coreRed Hat Integration Camel K 1/undertow MavenRed Hat High Fix reported
Undertow vulnerable to Dos via Large AJP requestCVE-2022-2053 · GHSA-95RF-557X-44G5 io.undertow:undertow-coreRed Hat Data Grid 8/undertow MavenRed Hat High Fix reported
Denial of service in UndertowCVE-2020-27782 · GHSA-RHCW-WJCM-9H6G io.undertow:undertow-coreRed Hat Integration Camel K 1/undertow MavenRed Hat High Fix reported
undertow: potential security issue in flow control over HTTP/2 may lead to DOS(incomplete fix for CVE-2021-3629)CVE-2022-1259 Red Hat Integration Camel K 1/undertowRed Hat Integration Service Registry/undertow Red Hat Medium No fix reported
Undertow: DoS can be achieved as Undertow server waits for the LAST_CHUNK forever for EJB invocationsCVE-2022-2764 Red Hat Data Grid 8/undertowRed Hat Fuse 7/undertow Red Hat Low No fix reported