Skip to content
OpenAdvisories
Medium WID-SEC-2023-3072 3 CVEs

Red Hat Enterprise Linux(Cryostat): Mehrere Schwachstellen

Published Dec 6, 2023 · Updated Dec 17, 2024 · Revision 2 · de-DE

Vendor: Hitachi Vendor: Red Hat Product: Enterprise Linux Product: Ops Center Platform: Linux

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um einen Denial of Service Angriff durchzuführen oder Informationen offenzulegen.

Product

Red Hat Enterprise Linux (RHEL) ist eine populäre Linux-Distribution.

Vulnerabilities 3

  • Medium 6.5
    CVE-2023-34462

    netty-handler SniHandler 16MB allocation

    Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. The `SniHandler` can allocate up to 16MB of heap for each channel during the TLS handshake. When the handler…

    netty netty netty netty Debian Ubuntu Wolfi Maven
  • Medium 5.3
    CVE-2023-33201

    Bouncy Castle For Java LDAP injection vulnerability

    Bouncy Castle For Java before 1.74 is affected by an LDAP injection vulnerability. The vulnerability only affects applications that use an LDAP CertStore from Bouncy Castle to validate X.509 certificates. During the certificate validation process, Bouncy Cast…

    druid tez bouncycastle bouncycastle Debian Ubuntu Wolfi Maven
  • Medium 4.8
    CVE-2023-24815

    Disclosure of classpath resources on Windows when mounted on a wildcard route in vertx-web

    Vert.x-Web is a set of building blocks for building web applications in the java programming language. When running vertx web applications that serve files using `StaticHandler` on Windows Operating Systems and Windows File Systems, if the mount point is a wi…

    vert-x3 vertx-web io.vertx:vertx-web Maven

Revision history

  1. #2

    Neue Updates von HITACHI aufgenommen

  2. #1

    Initiale Fassung

References