Advisories · Technology
Red Hat Build of Debezium 3.6.
Every CVE that names Red Hat Build of Debezium 3.6 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.5 Medium
Io.netty/netty-codec-http: netty: incomplete validation of malformed transfer-encoding allows http request smuggling
- Red Hat Build of Debezium 3.6
- Red Hat build of Quarkus 3.27.5.SP2
- CWE-1035
- CVSS 6.5 Medium
Io.netty/netty-codec-http: netty: http request smuggling via post-digit whitespace in chunk-size parsing
- Red Hat Build of Debezium 3.6
- Red Hat build of Quarkus 3.27.5.SP2
- HTTP request smuggling
- CVSS 6.5 Medium
Io.netty/netty-codec-http2: netty: http/2 header field values are not validated by default (cr/lf/nul passthrough)
- Red Hat Build of Debezium 3.6
- Red Hat build of Quarkus 3.27.5.SP2
- CWE-1035
- CVSS 6.5 Medium
Io.netty/netty-codec-http: netty split transfer-encoding fields bypass final-chunked validation and enable request smuggling
- Red Hat Build of Debezium 3.6
- Red Hat build of Quarkus 3.27.5.SP2
- HTTP request smuggling
- CVSS 7.5 High
Io.netty/netty-codec-http2: io.netty/netty-codec-http3: netty: http/2 and http/3 extended connect requests are downgraded as regular connect requests
- Red Hat Build of Apache Camel 3.33.3.SP2
- Red Hat Build of Debezium 3.6
- CWE-20
- CVSS 8.2 High
Io.netty/netty-codec-http2: http/1 absolute-form host mismatch is translated to http/2 :authority, overriding the request-target authority
- Red Hat Build of Apache Camel 3.33.3.SP2
- Red Hat Build of Debezium 3.6
- HTTP request smuggling
- CVSS 7.5 High
Io.netty/netty-codec-http2: http/1 authority-form connect is translated to malformed http/2 connect with host-controlled :authority
- Red Hat Build of Apache Camel 3.33.3.SP2
- Red Hat Build of Debezium 3.6
- CWE-20
- CVSS 6.5 Medium
Io.netty/netty-codec-http: netty: http request smuggling due to control characters in the chunk-size line
- Red Hat Build of Debezium 3.6
- Red Hat build of Quarkus 3.27.5.SP2
- CWE-1035
- CVSS 7.5 High
Io.netty/netty-codec-http: netty rtspdecoder method-token smuggling via trailing control byte
- Red Hat Build of Apache Camel 3.33.3.SP2
- Red Hat Build of Debezium 3.6
- CWE-1035
- CVSS 7.5 High
Io.netty/netty-codec-haproxy: netty: haproxy proxy-v2 nested-tlv grandchild bytebuf reference-count leak (incomplete fix of pr #16881)
- Red Hat Build of Apache Camel 3.33.3.SP2
- Red Hat Build of Debezium 3.6
- CWE-1035
- CVSS 7.5 High
Io.netty/netty-codec-http: netty: unbounded per-connection queue growth in websocketserverextensionhandler leads to denial of service
- Red Hat Build of Apache Camel 3.33.3.SP2
- Red Hat Build of Debezium 3.6
- CWE-1035
- CVSS 5.3 Medium
Io.netty/netty-codec-http2: netty: http/2 hpackencoder dos with large table size
- Red Hat Build of Debezium 3.6
- Red Hat build of Quarkus 3.27.5.SP2
- CWE-1035
- CVSS 7.5 High
Io.netty/netty-codec-http: netty: denial of service via unbounded httpservercodec http/1.1 pipeline queue
- Red Hat Build of Apache Camel 3.33.3.SP2
- Red Hat Build of Debezium 3.6
- Denial of service
- CVSS 7.5 High
Io.netty/netty-codec-http: netty: denial of service via unbounded concurrent spdy streams
- Red Hat Build of Apache Camel 3.33.3.SP2
- Red Hat Build of Debezium 3.6
- Denial of service
- CVSS 7.4 High
Wildfly-elytron: org.wildfly.security/wildfly-elytron-password-impl: wildfly-elytron: password keyspace reduction via nfkc fullwidth folding
- Red Hat Build of Apache Camel 3.33.3.SP2
- Red Hat Build of Debezium 3.6
- CWE-173