All products

Red Hat Integration Camel Quarkus 1/undertow

Red Hat · Package
5 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Undertow client not checking server identity presented by server certificate in https connectionsCVE-2022-4492 · GHSA-PFCC-3G6R-8RG8 io.undertow:undertow-coreRed Hat Data Grid 8/undertow MavenRed Hat Critical Fix reported
Undertow vulnerable to memory exhaustion due to buffer leakCVE-2021-3690 · GHSA-FJ7C-VG2V-CCRM io.undertow:undertow-coreRed Hat Integration Camel K 1/undertow MavenRed Hat High Fix reported
Undertow vulnerable to Dos via Large AJP requestCVE-2022-2053 · GHSA-95RF-557X-44G5 io.undertow:undertow-coreRed Hat Data Grid 8/undertow MavenRed Hat High Fix reported
Denial of service in UndertowCVE-2020-27782 · GHSA-RHCW-WJCM-9H6G io.undertow:undertow-coreRed Hat Integration Camel K 1/undertow MavenRed Hat High Fix reported
Undertow: DoS can be achieved as Undertow server waits for the LAST_CHUNK forever for EJB invocationsCVE-2022-2764 Red Hat Data Grid 8/undertowRed Hat Fuse 7/undertow Red Hat Low No fix reported