Advisories · Technology
Red Hat Build of Apache Camel 3.33.3.SP2.
Every CVE that names Red Hat Build of Apache Camel 3.33.3.SP2 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
Io.netty/netty-codec-http2: io.netty/netty-codec-http3: netty: http/2 and http/3 extended connect requests are downgraded as regular connect requests
- Red Hat Build of Apache Camel 3.33.3.SP2
- Red Hat Build of Debezium 3.6
- CWE-20
- CVSS 8.2 High
Io.netty/netty-codec-http2: http/1 absolute-form host mismatch is translated to http/2 :authority, overriding the request-target authority
- Red Hat Build of Apache Camel 3.33.3.SP2
- Red Hat Build of Debezium 3.6
- HTTP request smuggling
- CVSS 7.5 High
Io.netty/netty-codec-http2: http/1 authority-form connect is translated to malformed http/2 connect with host-controlled :authority
- Red Hat Build of Apache Camel 3.33.3.SP2
- Red Hat Build of Debezium 3.6
- CWE-20
- CVSS 7.5 High
Io.netty/netty-codec-http: netty rtspdecoder method-token smuggling via trailing control byte
- Red Hat Build of Apache Camel 3.33.3.SP2
- Red Hat Build of Debezium 3.6
- CWE-1035
- CVSS 7.5 High
Io.netty/netty-codec-haproxy: netty: haproxy proxy-v2 nested-tlv grandchild bytebuf reference-count leak (incomplete fix of pr #16881)
- Red Hat Build of Apache Camel 3.33.3.SP2
- Red Hat Build of Debezium 3.6
- CWE-1035
- CVSS 7.5 High
Io.netty/netty-codec-http: netty: unbounded per-connection queue growth in websocketserverextensionhandler leads to denial of service
- Red Hat Build of Apache Camel 3.33.3.SP2
- Red Hat Build of Debezium 3.6
- CWE-1035
- CVSS 7.5 High
Io.netty/netty-codec-http: netty: denial of service via unbounded httpservercodec http/1.1 pipeline queue
- Red Hat Build of Apache Camel 3.33.3.SP2
- Red Hat Build of Debezium 3.6
- Denial of service
- CVSS 7.5 High
Io.netty/netty-codec-http: netty: denial of service via unbounded concurrent spdy streams
- Red Hat Build of Apache Camel 3.33.3.SP2
- Red Hat Build of Debezium 3.6
- Denial of service
- CVSS 7.4 High
Wildfly-elytron: org.wildfly.security/wildfly-elytron-password-impl: wildfly-elytron: password keyspace reduction via nfkc fullwidth folding
- Red Hat Build of Apache Camel 3.33.3.SP2
- Red Hat Build of Debezium 3.6
- CWE-173