RHSA-2024:0793HighCVSS 7.5

Red Hat Security Advisory: Red Hat Integration Camel for Spring Boot 4.0.3 release security update

Published
February 12, 2024
Last Modified
August 4, 2026

🔗 CVE IDs covered (3)

CVE-2023-4043 →CVE-2023-6378 →CVE-2023-6481 →

📋 Description

CVE-2023-4043 — parsson: Denial of Service due to large number parsing CVE-2023-6378 — logback: serialization vulnerability in logback receiver CVE-2023-6481 — logback: A serialization vulnerability in logback receiver

🎯 Affected products1

  • RHINT Camel-Springboot 4.0.3

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: Avoid processing untrusted sources content in order to minimize the chance for Denial of Service attack. Workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (6)