Advisories · Technology
Red Hat AMQ Clients.
Every CVE that names Red Hat AMQ Clients among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.5 Medium
Io.netty/netty-codec-http: netty: incomplete validation of malformed transfer-encoding allows http request smuggling
- Red Hat Build of Debezium 3.6
- Red Hat build of Quarkus 3.27.5.SP2
- CWE-1035
- CVSS 6.5 Medium
Io.netty/netty-codec-http: netty: http request smuggling via post-digit whitespace in chunk-size parsing
- Red Hat Build of Debezium 3.6
- Red Hat build of Quarkus 3.27.5.SP2
- HTTP request smuggling
- CVSS 6.5 Medium
Io.netty/netty-codec-http: netty split transfer-encoding fields bypass final-chunked validation and enable request smuggling
- Red Hat Build of Debezium 3.6
- Red Hat build of Quarkus 3.27.5.SP2
- HTTP request smuggling
- CVSS 6.5 Medium
Io.netty/netty-codec-http: netty: http request smuggling due to control characters in the chunk-size line
- Red Hat Build of Debezium 3.6
- Red Hat build of Quarkus 3.27.5.SP2
- CWE-1035
- CVSS 7.5 High
Io.netty/netty-codec-http: netty rtspdecoder method-token smuggling via trailing control byte
- Red Hat Build of Apache Camel 3.33.3.SP2
- Red Hat Build of Debezium 3.6
- CWE-1035
- CVSS 7.5 High
Io.netty/netty-codec-http: netty: unbounded per-connection queue growth in websocketserverextensionhandler leads to denial of service
- Red Hat Build of Apache Camel 3.33.3.SP2
- Red Hat Build of Debezium 3.6
- CWE-1035
- CVSS 7.5 High
Io.netty/netty-codec-http: netty: denial of service via unbounded httpservercodec http/1.1 pipeline queue
- Red Hat Build of Apache Camel 3.33.3.SP2
- Red Hat Build of Debezium 3.6
- Denial of service
- CVSS 7.5 High
Io.netty/netty-codec-http: netty: denial of service via unbounded concurrent spdy streams
- Red Hat Build of Apache Camel 3.33.3.SP2
- Red Hat Build of Debezium 3.6
- Denial of service