Skip to content
OpenAdvisories
Medium WID-SEC-2023-2583 2 CVEs

Red Hat JBoss A-MQ: Mehrere Schwachstellen

Published Oct 5, 2023 · Updated Feb 13, 2024 · Revision 3 · de-DE

Vendor: Red Hat Product: Enterprise Linux Product: JBoss A-MQ Platform: Linux

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in Red Hat JBoss A-MQ ausnutzen, um Informationen offenzulegen, Dateien zu manipulieren oder einen Denial of Service Zustand herbeizuführen.

Product

JBoss A-MQ ist eine Messaging-Plattform.

Vulnerabilities 2

  • Medium 5.5
    CVE-2023-2976

    Use of temporary directory for file creation in `FileBackedOutputStream` in Guava

    Use of Java's default temporary directory for file creation in `FileBackedOutputStream` in Google Guava versions 1.0 to 31.1 on Unix systems and Android Ice Cream Sandwich allows other users and apps on the machine with access to the default Java temporary di…

    Google Guava celeborn-0.6 trino-plugin-clickhouse Debian Ubuntu Azure Linux Wolfi Maven
  • Medium 5.3
    CVE-2023-33008

    Apache Johnzon: Prevent inefficient internal conversion from BigDecimal at large scale

    Deserialization of Untrusted Data vulnerability in Apache Software Foundation Apache Johnzon. A malicious attacker can craft up some JSON input that uses large numbers (numbers such as 1e20000000) that Apache Johnzon will deserialize into BigDecimal and maybe…

    Apache Software Foundation Apache Johnzon org.apache.johnzon:johnzon-mapper Maven

Revision history

  1. #3

    Neue Updates von Red Hat aufgenommen

  2. #2

    Neue Updates von Red Hat aufgenommen

  3. #1

    Initiale Fassung

References