IP-DB.com
Türkçe English Deutsch Español
Entrar Obtener clave API
7.5Alta

CVE-2026-1605

Eclipse Foundation Eclipse Jetty; Red Hat HawtIO HawtIO 4.4.0; Red Hat Red Hat AMQ Broker 7.14.0; Red Hat Red Hat JBoss Enterprise Application Platform 8.1 Publicada: (hace 8 meses)

Descripción

In Eclipse Jetty, versions 12.0.0-12.0.31 and 12.1.0-12.0.5, class GzipHandler exposes a vulnerability when a compressed HTTP request, with Content-Encoding: gzip, is processed and the corresponding response is not compressed. This happens because the JDK Inflater is allocated for decompressing the request, but it is not released because the release mechanism is tied to the compressed response. In this case, since the response is not compressed, the release mechanism does not trigger, causing the leak.

Debilidad (CWE): CWE-400CWE-401CWE-772

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
apache camel hawtio 4.4 —
Eclipse Foundation Eclipse Jetty 12.0.0 – ≤ 12.0.31, 12.1.0. – ≤ 12.1.5
eclipse jetty 12.0.0 – < 12.0.32
jboss enterprise application platform 8.1 —
ocp tools 4.12 —
ocp tools 4.13 —
ocp tools 4.14 —
ocp tools 4.15 —
ocp tools 4.16 —
ocp tools 4.17 —
ocp tools 4.18 —
ocp tools 4.19 —
ocp tools 4.20 —
ocp tools 4.21 —
ocp tools 4.22 —
openshift devspaces 3.28 —
Red Hat HawtIO HawtIO 4.4.0 —
Red Hat OpenShift Developer Tools and Services all versions
Red Hat OpenShift Developer Tools and Services 4.12 all versions
Red Hat OpenShift Developer Tools and Services 4.13 all versions
Red Hat OpenShift Developer Tools and Services 4.14 all versions
Red Hat OpenShift Developer Tools and Services 4.15 all versions
Red Hat OpenShift Developer Tools and Services 4.16 all versions
Red Hat OpenShift Developer Tools and Services 4.17 all versions
Red Hat OpenShift Developer Tools and Services 4.18 all versions
Red Hat OpenShift Developer Tools and Services 4.19 all versions
Red Hat OpenShift Developer Tools and Services 4.20 all versions
Red Hat OpenShift Developer Tools and Services 4.21 all versions
Red Hat OpenShift Developer Tools and Services 4.22 all versions
Red Hat Red Hat AMQ Broker 7.14.0 —
Red Hat Red Hat build of Apache Camel for Spring Boot 4 —
Red Hat Red Hat build of Apicurio Registry 2 —
Red Hat Red Hat build of Apicurio Registry 3 —
Red Hat Red Hat build of Debezium 2 —
Red Hat Red Hat build of Debezium 3 —
Red Hat Red Hat Data Grid 8 —
Red Hat Red Hat Enterprise Linux 7 —
Red Hat Red Hat Enterprise Linux 8 —
Red Hat Red Hat Enterprise Linux 9 —
Red Hat Red Hat Fuse 7 —
Red Hat Red Hat JBoss Enterprise Application Platform 7 —
Red Hat Red Hat JBoss Enterprise Application Platform 8.1 —
Red Hat Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8 all versions
Red Hat Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9 all versions
Red Hat Red Hat JBoss Enterprise Application Platform Expansion Pack —
Red Hat Red Hat JBoss Web Server 6 —
Red Hat Red Hat Offline Knowledge Portal —
Red Hat Red Hat OpenShift Dev Spaces 3.28 all versions
Red Hat Red Hat Process Automation 7 —
Red Hat Red Hat Satellite 6 —
Red Hat Red Hat Single Sign-On 7 —
Red Hat streams for Apache Kafka 2 —
Red Hat streams for Apache Kafka 3 —

Referencias y parches

Coincidencias CPE (NVD) (2)
  • cpe:2.3:a:eclipse:jetty:*:*:*:*:*:*:*:* ≥ 12.0.0 < 12.0.32
  • cpe:2.3:a:eclipse:jetty:*:*:*:*:*:*:*:* ≥ 12.1.0 < 12.1.6

CVE recientes del mismo producto — Red Hat Enterprise Linux

5.9Media
CVE-2026-122056

Openscap: one-byte heap buffer overflow in sds-compose may lead to denial-of-service

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

A flaw was found in OpenSCAP. A heap-based buffer overflow can occur when processing a specially crafted Extensible Configuration Checklist Description Format (XCCDF) document using the sds-compose option. An attacker could exploit this vulnerability to corru…

7.5Alta
CVE-2026-112314

Krb5: mit krb5 gss-rpc client memory leak on xid mismatch retries

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

clnttcp_call() in lib/rpc/clnt_tcp.c in MIT Kerberos 5 (aka krb5) does not free the RPC reply verifier between retries, which allows remote attackers to cause a denial of service (memory leak in GSS-RPC client programs) by injecting RPC replies with mismatche…

7.5Alta
CVE-2026-112321

Krb5: mit krb5 kadmind unauthenticated memory leak dos via auth_gssapi_init error paths

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

The AUTH_GSSAPI handler in lib/rpc/svc_auth_gssapi.c in MIT Kerberos 5 (aka krb5) does not free decoded arguments on certain error paths, which allows remote attackers to cause a denial of service (memory exhaustion in kadmind) via crafted AUTH_GSSAPI_INIT re…

7.5Alta
CVE-2026-112320

Krb5: mit krb5 kadmind unauthenticated memory leak dos via gss-rpc auth flavor switching

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

The GSS-RPC transport layer in MIT Kerberos 5 (aka krb5) 1.4 and later does not release the previous authentication context when a client switches from an RPCSEC_GSS or AUTH_GSSAPI flavor to a non-GSS flavor on the same TCP connection. This allows remote atta…

6.5Media
CVE-2026-112319

Krb5: mit krb5 kadmind authenticated memory exhaustion dos via unbounded rpc xdr allocation

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

The GSS-RPC layer in MIT Kerberos 5 (aka krb5) does not enforce size limits on XDR-decoded data, which allows remote authenticated users to cause a denial of service (memory exhaustion or excessive CPU consumption in kadmind) via crafted RPC requests that tri…

6.5Media
CVE-2026-112318

Krb5: mit krb5 kadmind authenticated dos exploiting dereference of null policy name pointers

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 6; Red Hat Red Hat Enterprise Linux 7; Red Hat Red Hat Enterprise Linux 8

The policy RPC stubs in kadmin/server/server_stubs.c in MIT Kerberos 5 (aka krb5) 1.5.3 and later do not reject a NULL policy name decoded by xdr_nullstring(), which allows remote authenticated users to cause a denial of service (kadmind crash via NULL pointe…