RHSA-2022:6757HighCVSS 7.5

Red Hat Security Advisory: Red Hat build of Eclipse Vert.x 4.3.3 security update

Published
October 5, 2022
Last Modified
August 4, 2026

🔗 CVE IDs covered (6)

CVE-2022-38752 →CVE-2022-25857 →CVE-2022-37734 →CVE-2022-38749 →CVE-2022-38750 →CVE-2022-38751 →

📋 Description

CVE-2022-25857 — snakeyaml: Denial of Service due to missing nested depth limitation for collections CVE-2022-37734 — graphql-java: DoS by malicious query CVE-2022-38749 — snakeyaml: Uncaught exception in org.yaml.snakeyaml.composer.Composer.composeSequenceNode CVE-2022-38750 — snakeyaml: Uncaught exception in org.yaml.snakeyaml.constructor.BaseConstructor.constructObject CVE-2022-38751 — snakeyaml: Uncaught exception in java.base/java.util.regex.Pattern$Ques.match CVE-2022-38752 — snakeyaml: Uncaught exception in java.base/java.util.ArrayList.hashCode

🎯 Affected products1

  • Red Hat build of Eclipse Vert.x 4.3.3

✅ Remediation

Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on. The References section of this erratum contains a download link for the update. You must be logged in to download the update.

🔗 References (11)