Vulnerabilidades de apache camel spring boot (CVE)

Registros CVE publicados para apache camel spring boot, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

4 resultados
7.5Alta
CVE-2024-5971

Undertow: response write hangs in case of java 17 tlsv1.3 newsessionticket

undertow; Red Hat Red Hat build of Apache Camel 3.20.7 for Spring Boot; Red Hat Red Hat build of Apache Camel 4.4.1 for Spring Boot 3.2; Red Hat Red Hat build of Apache Camel 4.4.2 for Spring Boot

A vulnerability was found in Undertow, where the chunked response hangs after the body was flushed. The response headers and body were sent but the client would continue waiting as Undertow does not send the expected 0\r\n termination of the chunked response.…

2.9%EPSS
5.4Media
CVE-2024-1300

Io.vertx:vertx-core: memory leak when a tcp server is configured with tls and sni support

io.vertx:vertx-core; Red Hat CEQ 3.2; Red Hat Cryostat 2 on RHEL 8; Red Hat Migration Toolkit for Runtimes 1 on RHEL 8

A vulnerability in the Eclipse Vert.x toolkit causes a memory leak in TCP servers configured with TLS and SNI support. When processing an unknown SNI server name assigned the default certificate instead of a mapped certificate, the SSL context is erroneously …

1.1%EPSS
7.5Alta
CVE-2024-1635

Undertow: out-of-memory error after several closed connections with wildfly-http-client protocol

undertow; Red Hat Red Hat build of Apache Camel 4.4.1 for Spring Boot 3.2; Red Hat Red Hat Fuse 7.13.0; Red Hat Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7

A vulnerability was found in Undertow. This vulnerability impacts a server that supports the wildfly-http-client protocol. Whenever a malicious user opens and closes a connection with the HTTP port of the server and then closes the connection immediately, the…

4.6%EPSS