Skip to content
OpenAdvisories
Medium WID-SEC-2023-0209 8 CVEs

Red Hat Integration Camel Extensions for Quarkus: Mehrere Schwachstellen ermöglichen Denial of Service

Published Jan 26, 2023 · Updated Sep 21, 2025 · Revision 7 · de-DE

Vendor: Dell Vendor: IBM Vendor: Red Hat Product: Enterprise Linux Product: NetWorker Product: SPSS Platform: Linux

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Integration Camel Extensions for Quarkus ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

Red Hat Enterprise Linux (RHEL) ist eine populäre Linux-Distribution.

Vulnerabilities 8

  • High 7.5
    CVE-2022-40153 Rejected

    DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and…

  • High 7.5
    CVE-2022-40154 Rejected

    DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and…

  • High 7.5
    CVE-2022-40155 Rejected

    DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and…

  • High 7.5
    CVE-2022-40156 Rejected

    DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and…

  • Medium 6.5
    CVE-2022-40149

    Stack Buffer Overflow in Jettison

    Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may su…

    Jettison Jettison druid libjettison-java Debian Ubuntu Wolfi Maven
  • Medium 6.5
    CVE-2022-40150

    Stack Buffer Overflow in Jettison

    Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by Out of memory. This effect may su…

    Jettison Jettison druid libjettison-java Debian Ubuntu Wolfi Maven
  • Medium 6.5
    CVE-2022-40151

    Stack Buffer Overflow in xstream

    Those using Xstream to seralize XML data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial o…

    x-stream xstream com.thoughtworks.xstream:xstream libxstream-java Debian Ubuntu Maven
  • Medium 6.5
    CVE-2022-40152 EPSS 18%

    Stack Buffer Overflow in Woodstox

    Those using Woodstox to parse XML data may be vulnerable to Denial of Service attacks (DOS) if DTD support is enabled. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effec…

    x-stream Woodstox libxstream-java sonarqube-10 Debian Ubuntu Wolfi Maven

Revision history

  1. #7

    Neue Updates von IBM aufgenommen

  2. #6

    Neue Updates von Red Hat aufgenommen

  3. #5

    Neue Updates von Dell aufgenommen

  4. #4

    Neue Updates von Dell aufgenommen

  5. #3

    Neue Updates von Red Hat aufgenommen

  6. #2

    Neue Updates von Red Hat aufgenommen

  7. #1

    Initiale Fassung

References