RHEL 6 : undertow (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - undertow: LearningPushHandler can lead to remote memory DoS attacks CVE-2024-3653 Note that Nessus has not tested f...

Moderate: Red Hat Security Advisory: Red Hat build of Quarkus 3.8.6 release and security update

An update is now available for Red Hat build of Quarkus. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability. For more information...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.18 Security update

An update is now available for Red Hat JBoss Enterprise Application Platform 7.4. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.18 Security update

An update is now available for Red Hat JBoss Enterprise Application Platform 7.4 for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...

RHEL 9 : Red Hat JBoss Enterprise Application Platform 7.4.18 Security update (Important) (RHSA-2024:5145)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:5145 advisory. Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime. This release o...

RHEL 7 : Red Hat JBoss Enterprise Application Platform 7.4.18 Security update (Important) (RHSA-2024:5143)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:5143 advisory. Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime. This release o...

CVE-2024-3653

creationtimestamp| type| source ---|---|--- 2024-07-09 00:31:43+00:00| seen| https://t.me/cvedetector/219 2025-01-09 22:16:14+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1110 2025-02-26 04:24:30+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5446 2025-06-18 19:39:59+00:00| seen|...

com.github.jmjlbmn:huiche-demo (>=1.0.1, <=1.0.5), com.github.jmjlbmn:huiche-spring-boot-starter (>=1.0.1, <=1.0.6) +124 more potentially affected by CVE-2024-3653 via io.undertow:undertow-core (1.4.22.final)

io.undertow:undertow-core MAVEN version 1.4.22.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.github.jmjlbmn:huiche-demo =1.0.1, =1.0.1, =1.0.1.release, =0.5.0, =1.5.8, =1.3.1, =4.10.0-beta2,...

io.undertow:undertow-servlet (1.0.15.final), io.undertow:undertow-websockets-jsr (1.0.15.final) +17 more potentially affected by CVE-2024-3653 via io.undertow:undertow-core (1.0.15.final)

io.undertow:undertow-core MAVEN version 1.0.15.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.15.final - io.undertow:undertow-websockets-jsr 1.0.15.final -...

io.undertow:undertow-servlet (1.0.0.alpha16), io.undertow:undertow-websockets-jsr (1.0.0.alpha16) potentially affected by CVE-2024-3653 via io.undertow:undertow-core (1.0.0.alpha16)

io.undertow:undertow-core MAVEN version 1.0.0.alpha16 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha16 - io.undertow:undertow-websockets-jsr 1.0.0.alpha16 Source...

io.undertow:undertow-servlet (1.0.0.alpha2), io.undertow:undertow-websockets-jsr (1.0.0.alpha2) potentially affected by CVE-2024-3653 via io.undertow:undertow-core (1.0.0.alpha2)

io.undertow:undertow-core MAVEN version 1.0.0.alpha2 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha2 - io.undertow:undertow-websockets-jsr 1.0.0.alpha2 Source...

io.undertow:undertow-servlet (1.0.0.alpha14), io.undertow:undertow-websockets-jsr (1.0.0.alpha14) potentially affected by CVE-2024-3653 via io.undertow:undertow-core (1.0.0.alpha14)

io.undertow:undertow-core MAVEN version 1.0.0.alpha14 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha14 - io.undertow:undertow-websockets-jsr 1.0.0.alpha14 Source...

io.undertow:undertow-servlet (1.0.0.alpha7), io.undertow:undertow-websockets-jsr (1.0.0.alpha7) potentially affected by CVE-2024-3653 via io.undertow:undertow-core (1.0.0.alpha7)

io.undertow:undertow-core MAVEN version 1.0.0.alpha7 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha7 - io.undertow:undertow-websockets-jsr 1.0.0.alpha7 Source...

io.undertow:undertow-servlet (1.0.0.alpha6), io.undertow:undertow-websockets-jsr (1.0.0.alpha6) potentially affected by CVE-2024-3653 via io.undertow:undertow-core (1.0.0.alpha6)

io.undertow:undertow-core MAVEN version 1.0.0.alpha6 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha6 - io.undertow:undertow-websockets-jsr 1.0.0.alpha6 Source...

io.undertow:undertow-servlet (1.0.0.alpha8), io.undertow:undertow-websockets-jsr (1.0.0.alpha8) potentially affected by CVE-2024-3653 via io.undertow:undertow-core (1.0.0.alpha8)

io.undertow:undertow-core MAVEN version 1.0.0.alpha8 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha8 - io.undertow:undertow-websockets-jsr 1.0.0.alpha8 Source...

io.undertow:undertow-servlet (1.0.0.alpha4), io.undertow:undertow-websockets-jsr (1.0.0.alpha4) potentially affected by CVE-2024-3653 via io.undertow:undertow-core (1.0.0.alpha4)

io.undertow:undertow-core MAVEN version 1.0.0.alpha4 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha4 - io.undertow:undertow-websockets-jsr 1.0.0.alpha4 Source...

io.undertow:undertow-servlet (1.0.0.cr2), io.undertow:undertow-websockets-jsr (1.0.0.cr2) potentially affected by CVE-2024-3653 via io.undertow:undertow-core (1.0.0.cr2)

io.undertow:undertow-core MAVEN version 1.0.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.cr2 - io.undertow:undertow-websockets-jsr 1.0.0.cr2 Source cves:...

io.undertow:undertow-servlet (1.0.0.alpha18), io.undertow:undertow-websockets-jsr (1.0.0.alpha18) potentially affected by CVE-2024-3653 via io.undertow:undertow-core (1.0.0.alpha18)

io.undertow:undertow-core MAVEN version 1.0.0.alpha18 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha18 - io.undertow:undertow-websockets-jsr 1.0.0.alpha18 Source...

io.undertow:undertow-http2-test-suite (1.3.0.beta5), io.undertow:undertow-servlet (1.3.0.beta5) +10 more potentially affected by CVE-2024-3653 via io.undertow:undertow-core (1.3.0.beta5)

io.undertow:undertow-core MAVEN version 1.3.0.beta5 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.3.0.beta5 - io.undertow:undertow-servlet 1.3.0.beta5 -...

com.brinkus.labs:labs-cloud-starter-service (1.6.1), com.fizzed:ninja-undertow (6.1.0-undertow2) +243 more potentially affected by CVE-2024-3653 via io.undertow:undertow-core (1.4.20.final)

io.undertow:undertow-core MAVEN version 1.4.20.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.brinkus.labs:labs-cloud-starter-service 1.6.1 - com.fizzed:ninja-undertow 6.1.0-undertow2 -...