Security feed

advisoryOfficial CVE List

Undertow: outofmemory when parsing form data encoding with application/x-www-form-urlencoded

A flaw was found in Undertow that can cause remote denial of service attacks. When the server uses the FormEncodedDataDefinition.doParse(StreamSourceChannel) method to parse large form data encoding with application/x-www-form-urlencoded, the method will cause an OutOfMemory issue. This flaw allows unauthorized users to cause a remote denial of service (DoS) attack.

Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7Red Hat JBoss Enterprise Application Platform 7.4.24Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9Red Hat JBoss Enterprise Application Platform 8.0Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9Red Hat JBoss Enterprise Application Platform 8.1.3Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9OpenShift ServerlessRed Hat build of Apache Camel 4 for Quarkus 3Red Hat build of Apache Camel for Spring Boot 3Red Hat build of Apache Camel for Spring Boot 4Red Hat build of Apache Camel - HawtIO 4Red Hat build of Apicurio Registry 2Red Hat Build of KeycloakRed Hat build of OptaPlanner 8Red Hat build of QuarkusRed Hat build of QuarkusRed Hat Data Grid 8Red Hat Fuse 7Red Hat Integration Camel K 1Red Hat Integration Camel Quarkus 2Red Hat JBoss Data Grid 7Red Hat JBoss Enterprise Application Platform 7Red Hat JBoss Enterprise Application Platform Expansion PackRed Hat JBoss Fuse Service Works 6Red Hat Process Automation 7Red Hat Single Sign-On 7streams for Apache KafkaCVE-2024-3884
Structured advisory · Revision 1Original source
Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2024-3884

Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7

Source reference: /containers/cna/affected/0/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7

Source reference: /containers/cna/affected/1/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7

Source reference: /containers/cna/affected/2/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7

Source reference: /containers/cna/affected/3/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.4.24

Source reference: /containers/cna/affected/4/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7

Source reference: /containers/cna/affected/5/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7

Source reference: /containers/cna/affected/6/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8

Source reference: /containers/cna/affected/7/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8

Source reference: /containers/cna/affected/8/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9

Source reference: /containers/cna/affected/9/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9

Source reference: /containers/cna/affected/10/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 8.0

Source reference: /containers/cna/affected/11/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8

Source reference: /containers/cna/affected/12/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8

Source reference: /containers/cna/affected/13/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8

Source reference: /containers/cna/affected/14/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8

Source reference: /containers/cna/affected/15/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8

Source reference: /containers/cna/affected/16/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8

Source reference: /containers/cna/affected/17/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9

Source reference: /containers/cna/affected/18/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9

Source reference: /containers/cna/affected/19/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9

Source reference: /containers/cna/affected/20/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9

Source reference: /containers/cna/affected/21/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9

Source reference: /containers/cna/affected/22/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9

Source reference: /containers/cna/affected/23/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 8.1.3

Source reference: /containers/cna/affected/24/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8

Source reference: /containers/cna/affected/25/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8

Source reference: /containers/cna/affected/26/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8

Source reference: /containers/cna/affected/27/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8

Source reference: /containers/cna/affected/28/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8

Source reference: /containers/cna/affected/29/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8

Source reference: /containers/cna/affected/30/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8

Source reference: /containers/cna/affected/31/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8

Source reference: /containers/cna/affected/32/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8

Source reference: /containers/cna/affected/33/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8

Source reference: /containers/cna/affected/34/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8

Source reference: /containers/cna/affected/35/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8

Source reference: /containers/cna/affected/36/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9

Source reference: /containers/cna/affected/37/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9

Source reference: /containers/cna/affected/38/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9

Source reference: /containers/cna/affected/39/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9

Source reference: /containers/cna/affected/40/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9

Source reference: /containers/cna/affected/41/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9

Source reference: /containers/cna/affected/42/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9

Source reference: /containers/cna/affected/43/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9

Source reference: /containers/cna/affected/44/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9

Source reference: /containers/cna/affected/45/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9

Source reference: /containers/cna/affected/46/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9

Source reference: /containers/cna/affected/47/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9

Source reference: /containers/cna/affected/48/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

OpenShift Serverless

Source reference: /containers/cna/affected/49/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat build of Apache Camel 4 for Quarkus 3

Source reference: /containers/cna/affected/50/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat build of Apache Camel for Spring Boot 3

Source reference: /containers/cna/affected/51/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat build of Apache Camel for Spring Boot 4

Source reference: /containers/cna/affected/52/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat build of Apache Camel - HawtIO 4

Source reference: /containers/cna/affected/53/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat build of Apicurio Registry 2

Source reference: /containers/cna/affected/54/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Build of Keycloak

Source reference: /containers/cna/affected/55/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat build of OptaPlanner 8

Source reference: /containers/cna/affected/56/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat build of Quarkus

Source reference: /containers/cna/affected/57/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat build of Quarkus

Source reference: /containers/cna/affected/58/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Data Grid 8

Source reference: /containers/cna/affected/59/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Fuse 7

Source reference: /containers/cna/affected/60/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Integration Camel K 1

Source reference: /containers/cna/affected/61/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Integration Camel Quarkus 2

Source reference: /containers/cna/affected/62/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Data Grid 7

Source reference: /containers/cna/affected/63/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 7

Source reference: /containers/cna/affected/64/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform Expansion Pack

Source reference: /containers/cna/affected/65/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Fuse Service Works 6

Source reference: /containers/cna/affected/66/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Process Automation 7

Source reference: /containers/cna/affected/67/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Single Sign-On 7

Source reference: /containers/cna/affected/68/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

streams for Apache Kafka

Source reference: /containers/cna/affected/69/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record
Related CVEs
CVE-2024-3884

Source reference: /cveMetadata/cveId

Publisher severity

No explicit severity was provided.

Event
#22827 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement
advisoryOfficial CVE List

Undertow: out-of-memory error after several closed connections with wildfly-http-client protocol

A vulnerability was found in Undertow. This vulnerability impacts a server that supports the wildfly-http-client protocol. Whenever a malicious user opens and closes a connection with the HTTP port of the server and then closes the connection immediately, the server will end with both memory and open file limits exhausted at some point, depending on the amount of memory available. At HTTP upgrade to remoting, the WriteTimeoutStreamSinkConduit leaks connections if RemotingConnection is closed by Remoting ServerConnectionOpenListener. Because the remoting connection originates in Undertow as part of the HTTP upgrade, there is an external layer to the remoting connection. This connection is unaware of the outermost layer when closing the connection during the connection opening procedure. Hence, the Undertow WriteTimeoutStreamSinkConduit is not notified of the closed connection in this scenario. Because WriteTimeoutStreamSinkConduit creates a timeout task, the whole dependency tree leaks via that task, which is added to XNIO WorkerThread. So, the workerThread points to the Undertow conduit, which contains the connections and causes the leak.

Red Hat build of Apache Camel 4.4.1 for Spring Boot 3.2Red Hat Fuse 7.13.0Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7Red Hat JBoss Enterprise Application Platform 7.4.16Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7Red Hat Single Sign-On 7.6 for RHEL 7Red Hat Single Sign-On 7.6 for RHEL 8Red Hat Single Sign-On 7.6 for RHEL 9RHEL-8 based Middleware ContainersRHSSO 7.6.8OpenShift ServerlessRed Hat build of Apache Camel 4 for Quarkus 3Red Hat build of Apache Camel for Spring Boot 3Red Hat build of Apache Camel for Spring Boot 4Red Hat build of Apicurio Registry 2Red Hat Build of KeycloakRed Hat build of OptaPlanner 8Red Hat build of QuarkusRed Hat build of QuarkusRed Hat Data Grid 8Red Hat Integration Camel K 1Red Hat Integration Camel Quarkus 2Red Hat JBoss Data Grid 7Red Hat JBoss Enterprise Application Platform 8Red Hat JBoss Fuse Service Works 6Red Hat Process Automation 7streams for Apache KafkaCVE-2024-1635
Structured advisory · Revision 1Original source
Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2024-1635

Red Hat build of Apache Camel 4.4.1 for Spring Boot 3.2

Source reference: /containers/cna/affected/1/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Fuse 7.13.0

Source reference: /containers/cna/affected/2/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7

Source reference: /containers/cna/affected/3/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7

Source reference: /containers/cna/affected/4/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7

Source reference: /containers/cna/affected/5/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7

Source reference: /containers/cna/affected/6/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7

Source reference: /containers/cna/affected/7/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7

Source reference: /containers/cna/affected/8/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7

Source reference: /containers/cna/affected/9/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7

Source reference: /containers/cna/affected/10/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7

Source reference: /containers/cna/affected/11/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7

Source reference: /containers/cna/affected/12/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7

Source reference: /containers/cna/affected/13/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7

Source reference: /containers/cna/affected/14/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7

Source reference: /containers/cna/affected/15/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7

Source reference: /containers/cna/affected/16/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7

Source reference: /containers/cna/affected/17/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7

Source reference: /containers/cna/affected/18/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7

Source reference: /containers/cna/affected/19/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7

Source reference: /containers/cna/affected/20/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7

Source reference: /containers/cna/affected/21/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.4.16

Source reference: /containers/cna/affected/22/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8

Source reference: /containers/cna/affected/23/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9

Source reference: /containers/cna/affected/24/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7

Source reference: /containers/cna/affected/25/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Single Sign-On 7.6 for RHEL 7

Source reference: /containers/cna/affected/26/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Single Sign-On 7.6 for RHEL 8

Source reference: /containers/cna/affected/27/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Single Sign-On 7.6 for RHEL 9

Source reference: /containers/cna/affected/28/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

RHEL-8 based Middleware Containers

Source reference: /containers/cna/affected/29/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

RHSSO 7.6.8

Source reference: /containers/cna/affected/30/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

OpenShift Serverless

Source reference: /containers/cna/affected/31/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat build of Apache Camel 4 for Quarkus 3

Source reference: /containers/cna/affected/32/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat build of Apache Camel for Spring Boot 3

Source reference: /containers/cna/affected/33/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat build of Apache Camel for Spring Boot 4

Source reference: /containers/cna/affected/34/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat build of Apicurio Registry 2

Source reference: /containers/cna/affected/35/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Build of Keycloak

Source reference: /containers/cna/affected/36/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat build of OptaPlanner 8

Source reference: /containers/cna/affected/37/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat build of Quarkus

Source reference: /containers/cna/affected/38/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat build of Quarkus

Source reference: /containers/cna/affected/39/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Data Grid 8

Source reference: /containers/cna/affected/40/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Integration Camel K 1

Source reference: /containers/cna/affected/41/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Integration Camel Quarkus 2

Source reference: /containers/cna/affected/42/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Data Grid 7

Source reference: /containers/cna/affected/43/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Enterprise Application Platform 8

Source reference: /containers/cna/affected/44/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat JBoss Fuse Service Works 6

Source reference: /containers/cna/affected/45/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Red Hat Process Automation 7

Source reference: /containers/cna/affected/46/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

streams for Apache Kafka

Source reference: /containers/cna/affected/47/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record
Related CVEs
CVE-2024-1635

Source reference: /cveMetadata/cveId

Publisher severity

high

Source reference: /containers/cna/metrics

Event
#12316 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement