DeutschShown in its original language — a full translation is planned for a future version.
Apache Camel: Mehrere Schwachstellen ermöglichen Denial of Service
view advisory published 2023-11-30
Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in Apache Camel ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-5072US | high7.5 | — | ||
Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being… | ||||
| CVE-2023-39410US | high7.5 | — | ||
When deserializing untrusted or corrupted data, it is possible for a reader to consume memory beyond the allowed constraints and thus lead to out of memory on the system.
This iss… | ||||
02
references
External citations — patches, advisories, analysis.
- Security Advisory vom 2023-11-30external
- Red Hat Security Advisory RHSA-2023:7638 vom 2023-12-05external
- Red Hat Security Advisory RHSA-2023:7639 vom 2023-12-05external
- Red Hat Security Advisory RHSA-2023:7641 vom 2023-12-05external
- Red Hat Security Advisory RHSA-2023:7705 vom 2023-12-08external
- Red Hat Security Advisory RHSA-2023:7842 vom 2023-12-14external
- Red Hat Security Advisory RHSA-2023:7845 vom 2023-12-15external
- Red Hat Security Advisory RHSA-2024:0148 vom 2024-01-10external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan