Security
فارسی
All products

Logging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch6-rhel8

Red Hat · Package
11 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
SslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngineCVE-2025-24970 · GHSA-4G8C-WM8X-JFHW io.netty:netty-handlerCryostat 3/netty-handler MavenRed Hat High Fix reported
Netty's HttpPostRequestDecoder can OOMCVE-2024-29025 · GHSA-5JPM-X58V-624V io.netty:netty-codec-httpLogging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch6-rhel8 MavenRed Hat Medium Fix reported
Jettison parser crash by stackoverflowCVE-2022-40149 · GHSA-56H3-78GP-V83R org.codehaus.jettison:jettisonLogging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch6-rhel8 MavenRed Hat Medium Fix reported
Arbitrary File Creation in AbstractUnArchiverCVE-2023-37460 · GHSA-WH3P-FPHP-9H2M org.codehaus.plexus:plexus-archiverLogging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch6-rhel8 MavenRed Hat High Fix reported
Jettison vulnerable to infinite recursionCVE-2023-1436 · GHSA-Q6G2-G7F3-RR83 org.codehaus.jettison:jettisonLogging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch6-rhel8 MavenRed Hat High Fix reported
Jettison memory exhaustionCVE-2022-40150 · GHSA-X27M-9W8J-5VCW org.codehaus.jettison:jettisonLogging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch6-rhel8 MavenRed Hat High Fix reported
Exposure of Sensitive Information to an Unauthorized Actor in Apache SantuarioCVE-2021-40690 · GHSA-J8WC-GXX9-82HX org.apache.santuario:xmlsecLogging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch6-rhel8 MavenRed Hat High Fix reported
A potential Denial of Service issue in protobuf-javaCVE-2021-22569 · GHSA-WRVW-HG22-4M67 com.google.protobuf:protobuf-javacom.google.protobuf:protobuf-kotlin MavenRed HatRubyGems High Fix reported
Local Information Disclosure Vulnerability in io.netty:netty-codec-httpCVE-2022-24823 · GHSA-269Q-HMXG-M83Q io.netty:netty-codec-httpLogging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch6-rhel8 MavenRed Hat Medium Fix reported
Deserialization of Untrusted Data in GsonCVE-2022-25647 · GHSA-4JRV-PPP4-JM57 com.google.code.gson:gsonLogging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch6-rhel8 MavenRed Hat High Fix reported
Elasticsearch privilege escalationCVE-2022-23708 · GHSA-PGQ6-CCQJ-HPQR org.elasticsearch:elasticsearchLogging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch6-rhel8 MavenRed Hat Medium Fix reported