Red Hat JBoss Enterprise Anwendungsplattform: Mehrere Schwachstellen ermöglichen Denial of Service

Summary

Product

Vulnerabilities 2

• Medium 6.9
  CVE-2024-8391

  Eclipse Vert.x gRPC server does not limit the maximum message size

  In Eclipse Vert.x version 4.3.0 to 4.5.9, the gRPC server does not limit the maximum length of message payload (Maven GAV: io.vertx:vertx-grpc-server and io.vertx:vertx-grpc-client).  This is fixed in the 4.5.10 version.  Note this does not affect the Vert.x …

  Eclipse Foundation Eclipse Vert.x io.vertx:vertx-grpc-client io.vertx:vertx-grpc-server Maven
  Sep 4, 2024
• Medium 5.3
  CVE-2024-3653

  Undertow: learningpushhandler can lead to remote memory dos attacks

  A vulnerability was found in Undertow. This issue requires enabling the learning-push handler in the server's config, which is disabled by default, leaving the maxAge config in the handler unconfigured. The default is -1, which makes the handler vulnerable. I…

  Red Hat Red Hat Single Sign-On 7 Red Hat JBoss Enterprise Application Platform Expansion Pack Red Hat Data Grid 8 Debian Ubuntu Maven
  Jul 8, 2024

Revision history

1. 2025-01-21 #5

   Neue Updates von Red Hat aufgenommen

2. 2024-10-13 #4

   Neue Updates von Red Hat aufgenommen

3. 2024-09-25 #3

   fehlerhafte URL entfernt

4. 2024-09-24 #2

   Neue Updates von Red Hat aufgenommen

5. 2024-09-23 #1

   Initiale Fassung

References

• Red Hat Security Advisory vom 2024-09-23
  https://access.redhat.com/errata/RHSA-2024:6437
• Red Hat Bugzilla – Bug 2274437
  https://bugzilla.redhat.com/show_bug.cgi?id=2274437
• Red Hat Bugzilla – Bug 2309758
  https://bugzilla.redhat.com/show_bug.cgi?id=2309758
• Red Hat Security Advisory RHSA-2024:7052 vom 2024-09-24
  https://access.redhat.com/errata/RHSA-2024:7052
• Red Hat Security Advisory RHSA-2024:8023 vom 2024-10-14
  https://access.redhat.com/errata/RHSA-2024:8023
• Red Hat Security Advisory RHSA-2025:0542 vom 2025-01-21
  https://access.redhat.com/errata/RHSA-2025:0542