RHSA-2024:0148HighCVSS 7.5

Red Hat Security Advisory: Red Hat Integration Camel K 1.10.5 release and security update

Published
January 10, 2024
Last Modified
August 4, 2026

🔗 CVE IDs covered (3)

CVE-2023-5072 →CVE-2023-34455 →CVE-2023-34462 →

📋 Description

CVE-2023-5072 — JSON-java: parser confusion leads to OOM CVE-2023-34455 — snappy-java: Unchecked chunk length leads to DoS CVE-2023-34462 — netty: SniHandler 16MB allocation leads to OOM

🎯 Affected products1

  • RHINT Camel-K 1.10.5

✅ Remediation

Before applying the update, back up your existing installation, including all applications, configuration files, databases and database settings, and so on. The References section of this erratum contains a download link (you must log in to download the update). Workaround: No current mitigation is available for this flaw. Workaround: Configuration of SniHandler with an idle timeout will mitigate this issue.

🔗 References (6)