Aller au contenu

Vulnérabilités de Red Hat Red Hat Build of Keycloak

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2024-4629 A vulnerability was found in Keycloak 6.5 Moyenne 3 sept. 2024
CVE-2024-7885 Undertow: improper state management in proxy protocol parsing causes information leakage 7.5 Élevée 21 août 2024
CVE-2024-3653 A vulnerability was found in Undertow 5.3 Moyenne 8 juil. 2024
CVE-2024-5971 A vulnerability was found in Undertow, where the chunked response hangs after the body was flushed 7.5 Élevée 8 juil. 2024
CVE-2024-6162 A vulnerability was found in Undertow, where URL-encoded request paths can be mishandled during concurrent requests on… 7.5 Élevée 20 juin 2024
CVE-2024-5967 A vulnerability was found in Keycloak 2.7 Faible 18 juin 2024
CVE-2024-4540 A flaw was found in Keycloak in OAuth 2.0 Pushed Authorization Requests (PAR) 7.5 Élevée 3 juin 2024
CVE-2024-4029 A vulnerability was found in Wildfly’s management interface 4.1 Moyenne 2 mai 2024
CVE-2024-1102 A vulnerability was found in jberet-core logging 6.5 Moyenne 25 avr. 2024
CVE-2024-2700 Quarkus-core: leak of local configuration properties into quarkus applications 7.0 Élevée 4 avr. 2024
CVE-2024-1300 Io.vertx:vertx-core: memory leak when a tcp server is configured with tls and sni support 5.4 Moyenne 2 avr. 2024
CVE-2024-1023 Io.vertx/vertx-core: memory leak due to the use of netty fastthreadlocal data structures in vertx 6.5 Moyenne 27 mars 2024
CVE-2023-5685 Xnio: stackoverflowexception when the chain of notifier states becomes problematically big 7.5 Élevée 22 mars 2024
CVE-2024-1722 A flaw was found in Keycloak 3.7 Faible 27 févr. 2024
CVE-2024-1635 Undertow: out-of-memory error after several closed connections with wildfly-http-client protocol 7.5 Élevée 19 févr. 2024
CVE-2023-6563 An unconstrained memory consumption vulnerability was discovered in Keycloak 7.7 Élevée 14 déc. 2023

Autres produits Red Hat