Red Hat Integration: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 4

• High 8.1
  CVE-2024-25710

  Apache Commons Compress: Denial of service caused by an infinite loop for a corrupted DUMP file

  Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.3 through 1.25.0. Users are recommended to upgrade to version 1.26.0 which fixes the issue.

  Apache Software Foundation Apache Commons Compress druid trino Debian Ubuntu Azure Linux Wolfi Maven
  Feb 19, 2024
• Medium 6.5
  CVE-2024-1023

  Io.vertx/vertx-core: memory leak due to the use of netty fastthreadlocal data structures in vertx

  A vulnerability in the Eclipse Vert.x toolkit results in a memory leak due to using Netty FastThreadLocal data structures. Specifically, when the Vert.x HTTP client establishes connections to different hosts, triggering the memory leak. The leak can be accele…

  Red Hat Red Hat JBoss Enterprise Application Platform Expansion Pack Red Hat Data Grid 8 Red Hat JBoss Enterprise Application Platform 7 Maven
  Mar 27, 2024
• Medium 5.5
  CVE-2024-26308 Public exploit

  Apache Commons Compress: OutOfMemoryError unpacking broken Pack200 file

  Allocation of Resources Without Limits or Throttling vulnerability in Apache Commons Compress.This issue affects Apache Commons Compress: from 1.21 before 1.26. Users are recommended to upgrade to version 1.26, which fixes the issue.

  Apache Software Foundation Apache Commons Compress druid trino Debian Ubuntu Wolfi Maven
  Feb 19, 2024
• Medium 5.4
  CVE-2024-1300

  Io.vertx:vertx-core: memory leak when a tcp server is configured with tls and sni support

  A vulnerability in the Eclipse Vert.x toolkit causes a memory leak in TCP servers configured with TLS and SNI support. When processing an unknown SNI server name assigned the default certificate instead of a mapped certificate, the SSL context is erroneously …

  Red Hat Red Hat JBoss Enterprise Application Platform Expansion Pack Red Hat Data Grid 8 Red Hat JBoss Enterprise Application Platform 7 Maven
  Apr 2, 2024

Revision history

1. 2025-11-18 #9

   Neue Updates aufgenommen

2. 2024-12-17 #8

   Neue Updates von HITACHI aufgenommen

3. 2024-09-10 #7

   Neue Updates von Red Hat aufgenommen

4. 2024-07-25 #6

   Neue Updates von Red Hat aufgenommen

5. 2024-06-19 #5

   Neue Updates von Red Hat aufgenommen

6. 2024-05-30 #4

   Neue Updates von Red Hat aufgenommen

7. 2024-05-13 #3

   Neue Updates von Red Hat aufgenommen

8. 2024-04-18 #2

   Neue Updates von Red Hat aufgenommen

9. 2024-04-08 #1

   Initiale Fassung

References

• RedHat Security Advisory vom 2024-04-08
  https://access.redhat.com/errata/RHSA-2024:1706
• Red Hat Security Advisory RHSA-2024:1923 vom 2024-04-18
  https://access.redhat.com/errata/RHSA-2024:1923
• Red Hat Security Advisory RHSA-2024:2833 vom 2024-05-14
  https://access.redhat.com/errata/RHSA-2024:2833
• Red Hat Security Advisory RHSA-2024:3527 vom 2024-05-30
  https://access.redhat.com/errata/RHSA-2024:3527
• Red Hat Security Advisory RHSA-2024:3989 vom 2024-06-20
  https://access.redhat.com/errata/RHSA-2024:3989
• Red Hat Security Advisory RHSA-2024:4884 vom 2024-07-26
  https://access.redhat.com/errata/RHSA-2024:4884
• Red Hat Security Advisory RHSA-2024:6536 vom 2024-09-10
  https://access.redhat.com/errata/RHSA-2024:6536
• Hitachi Vulnerability Information HITACHI-SEC-2024-150 vom 2024-12-17
  https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2024-150/index.html
• Atlassian Security Bulletin - November 18 2025
  https://confluence.atlassian.com/security/security-bulletin-november-18-2025-1671463469.html