Skip to content
fr Sign in
4.4 Medium

CVE-2023-5236 A flaw was found in Infinispan, which does not detect circular object references when unmarshalling

Description

A flaw was found in Infinispan, which does not detect circular object references when unmarshalling. An authenticated attacker with sufficient permissions could insert a maliciously constructed object into the cache and use it to cause out of memory errors and achieve a denial of service.

Affected products and versions

Product Affected versions Fixed in
Red Hat Data Grid 8.4.4 Versions not published
Red Hat build of Apache Camel 4 for Quarkus 3 Versions not published
Red Hat build of Apache Camel for Spring Boot 4 Versions not published
Red Hat build of Debezium 2 Versions not published
Red Hat build of Debezium 3 Versions not published
Red Hat build of Quarkus Versions not published
Red Hat Data Grid 8 Versions not published
Red Hat Fuse 7 Versions not published
Red Hat JBoss Enterprise Application Platform 7 Versions not published
Show the 4 other branches
Product Affected versions Fixed in
Red Hat JBoss Enterprise Application Platform 8 Versions not published
Red Hat JBoss Enterprise Application Platform Expansion Pack Versions not published
Red Hat Process Automation 7 Versions not published
Red Hat Single Sign-On 7 Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Red Hat Data Grid 8.4.4

The 3 CVEs of Red Hat Data Grid 8.4.4 →
CVE-2023-3628 A flaw was found in Infinispan's REST 6.5 Medium CVE-2023-3629 A flaw was found in Infinispan's REST, Cache retrieval endpoints do not properly evaluate the necessary admin… 4.3 Medium
Track this CVE