What is RHSA-2022:6819?

RHSA-2022:6819 is a security advisory published by Red Hat Product Security with High severity. Red Hat Security Advisory: Red Hat AMQ Streams 2.2.0 release and security update

Which CVE IDs does RHSA-2022:6819 cover?

RHSA-2022:6819 covers the following CVE IDs: CVE-2020-36518, CVE-2022-24823, CVE-2022-25647, CVE-2022-34917. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2022:6819?

RHSA-2022:6819 has a CVSS v3 base score of 7.5, published by Red Hat Product Security.

Which products are affected by RHSA-2022:6819?

RHSA-2022:6819 affects 1 product, including: Red Hat AMQ Streams 2.2.0.

RHSA-2022:6819HighCVSS 7.5

Red Hat Security Advisory: Red Hat AMQ Streams 2.2.0 release and security update

Vendor

Red Hat Product Security

Published

October 5, 2022

Last Modified

August 7, 2026

🔗 CVE IDs covered (4)

CVE-2020-36518 →CVE-2022-24823 →CVE-2022-25647 →CVE-2022-34917 →

📋 Description

CVE-2020-36518 — jackson-databind: denial of service via a large depth of nested objects CVE-2022-24823 — netty: world readable temporary file containing sensitive data CVE-2022-25647 — com.google.code.gson-gson: Deserialization of Untrusted Data in com.google.code.gson-gson CVE-2022-34917 — Kafka: Unauthenticated clients may cause OutOfMemoryError on brokers

🎯 Affected products1

Red Hat AMQ Streams 2.2.0

✅ Remediation

Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on. The References section of this erratum contains a download link (you must log in to download the update). Workaround: As a workaround, specify one's own `java.io.tmpdir` when starting the JVM or use DefaultHttpDataFactory.setBaseDir(...) to set the directory to something that is only readable by the current user.

🔗 CVE IDs covered (4)

📋 Description

🎯 Affected products1

✅ Remediation

🔗 References (9)