io.quarkus:quarkus-jaxrs-client-deployment (1.12.0.cr1), io.quarkus:quarkus-resteasy-reactive-deployment (1.12.0.cr1) +4 more potentially affected by CVE-2023-5675 via io.quarkus:quarkus-resteasy-reactive-common-deployment (1.12.0.cr1)

io.quarkus:quarkus-resteasy-reactive-common-deployment MAVEN version 1.12.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy-reactive-common-deployment and may be impacted: - io.quarkus:quarkus-jaxrs-client-deployment...

io.quarkus:quarkus-jaxrs-client-deployment (1.13.0.final), io.quarkus:quarkus-rest-client-reactive-deployment (1.13.0.final) +5 more potentially affected by CVE-2023-5675 via io.quarkus:quarkus-resteasy-reactive-common-deployment (1.13.0.final)

io.quarkus:quarkus-resteasy-reactive-common-deployment MAVEN version 1.13.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy-reactive-common-deployment and may be impacted: - io.quarkus:quarkus-jaxrs-client-deployment...

io.quarkus.resteasy.reactive:resteasy-reactive-jackson (2.7.3.final), io.quarkus.resteasy.reactive:resteasy-reactive-jsonb (2.7.3.final) +51 more potentially affected by CVE-2024-1726 via io.quarkus.resteasy.reactive:resteasy-reactive (2.7.3.final)

io.quarkus.resteasy.reactive:resteasy-reactive MAVEN version 2.7.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.resteasy.reactive:resteasy-reactive and may be impacted: - io.quarkus.resteasy.reactive:resteasy-reactive-jackson...

io.quarkus.resteasy.reactive:resteasy-reactive-jackson (2.10.3.final), io.quarkus.resteasy.reactive:resteasy-reactive-jsonb (2.10.3.final) +64 more potentially affected by CVE-2024-1726 via io.quarkus.resteasy.reactive:resteasy-reactive (2.10.3.final)

io.quarkus.resteasy.reactive:resteasy-reactive MAVEN version 2.10.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.resteasy.reactive:resteasy-reactive and may be impacted: - io.quarkus.resteasy.reactive:resteasy-reactive-jackson...

io.quarkus.resteasy.reactive:resteasy-reactive-jackson (2.6.1.final), io.quarkus.resteasy.reactive:resteasy-reactive-jsonb (2.6.1.final) +38 more potentially affected by CVE-2024-1726 via io.quarkus.resteasy.reactive:resteasy-reactive (2.6.1.final)

io.quarkus.resteasy.reactive:resteasy-reactive MAVEN version 2.6.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.resteasy.reactive:resteasy-reactive and may be impacted: - io.quarkus.resteasy.reactive:resteasy-reactive-jackson...

io.quarkus.resteasy.reactive:resteasy-reactive-jackson (2.7.0.cr1), io.quarkus.resteasy.reactive:resteasy-reactive-jsonb (2.7.0.cr1) +42 more potentially affected by CVE-2024-1726 via io.quarkus.resteasy.reactive:resteasy-reactive (2.7.0.cr1)

io.quarkus.resteasy.reactive:resteasy-reactive MAVEN version 2.7.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.resteasy.reactive:resteasy-reactive and may be impacted: - io.quarkus.resteasy.reactive:resteasy-reactive-jackson 2.7.0.cr...

io.quarkus.resteasy.reactive:resteasy-reactive-jackson (2.8.0.cr1), io.quarkus.resteasy.reactive:resteasy-reactive-jsonb (2.8.0.cr1) +53 more potentially affected by CVE-2024-1726 via io.quarkus.resteasy.reactive:resteasy-reactive (2.8.0.cr1)

io.quarkus.resteasy.reactive:resteasy-reactive MAVEN version 2.8.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.resteasy.reactive:resteasy-reactive and may be impacted: - io.quarkus.resteasy.reactive:resteasy-reactive-jackson 2.8.0.cr...

io.quarkus.resteasy.reactive:resteasy-reactive-jackson (3.8.0.cr1), io.quarkus.resteasy.reactive:resteasy-reactive-jsonb (3.8.0.cr1) +58 more potentially affected by CVE-2024-1726 via io.quarkus.resteasy.reactive:resteasy-reactive (3.8.0.cr1)

io.quarkus.resteasy.reactive:resteasy-reactive MAVEN version 3.8.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.resteasy.reactive:resteasy-reactive and may be impacted: - io.quarkus.resteasy.reactive:resteasy-reactive-jackson 3.8.0.cr...

io.quarkus.resteasy.reactive:resteasy-reactive-jackson (2.13.9.final), io.quarkus.resteasy.reactive:resteasy-reactive-jsonb (2.13.9.final) +8 more potentially affected by CVE-2024-1726 via io.quarkus.resteasy.reactive:resteasy-reactive (2.13.9.final)

io.quarkus.resteasy.reactive:resteasy-reactive MAVEN version 2.13.9.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.resteasy.reactive:resteasy-reactive and may be impacted: - io.quarkus.resteasy.reactive:resteasy-reactive-jackson...

io.quarkus.resteasy.reactive:resteasy-reactive-jackson (2.12.0.cr1), io.quarkus.resteasy.reactive:resteasy-reactive-jsonb (2.12.0.cr1) +51 more potentially affected by CVE-2024-1726 via io.quarkus.resteasy.reactive:resteasy-reactive (2.12.0.cr1)

io.quarkus.resteasy.reactive:resteasy-reactive MAVEN version 2.12.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.resteasy.reactive:resteasy-reactive and may be impacted: - io.quarkus.resteasy.reactive:resteasy-reactive-jackson...

io.quarkus:quarkus-amazon-lambda (0.11.0), io.quarkus:quarkus-elytron-security (0.11.0) +10 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-undertow (0.11.0)

io.quarkus:quarkus-undertow MAVEN version 0.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-undertow and may be impacted: - io.quarkus:quarkus-amazon-lambda 0.11.0 - io.quarkus:quarkus-elytron-security 0.11.0 -...

SUSE CVE-2015-5289

Multiple stack-based buffer overflows in json parsing in PostgreSQL before 9.3.x before 9.3.10 and 9.4.x before 9.4.5 allow attackers to cause a denial of service server crash via unspecified vectors, which are not properly handled in 1 json or 2 jsonb values...

PostgreSQL json_populate_recordset JSON Injection Unauthorized Access

The vulnerability of the jsonpopulaterecordset and jsonbpopulaterecordset functions in the PostgreSQL database management system is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to cause service failures or gain unauthorized access to...

postgresql: Memory disclosure in JSON functions

Invalid jsonpopulaterecordset or jsonbpopulaterecordset function calls in PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, and 9.3.x before 9.3.20 can crash the server or disclose a few bytes of server memory...

UBUNTU-CVE-2017-15098

Invalid jsonpopulaterecordset or jsonbpopulaterecordset function calls in PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, 9.5.x before 9.5.10, 9.4.x before 9.4.15, and 9.3.x before 9.3.20 can crash the server or disclose a few bytes of server memory...

PT-2017-3859

Name of the Vulnerable Software and Affected Versions PostgreSQL versions 10.x before 10.1 PostgreSQL versions 9.6.x before 9.6.6 PostgreSQL versions 9.5.x before 9.5.10 PostgreSQL versions 9.4.x before 9.4.15 PostgreSQL versions 9.3.x before 9.3.20 Description The issue is related to invalid jso...

openSUSE Security Update : postgresql94 (openSUSE-2016-271)

This update for postgresql94 fixes the following issues : - Security and bugfix release 9.4.6 : - IMPORTANT Users of version 9.4 will need to reindex any jsonbpathops indexes they have created, in order to fix a persistent issue with missing index entries. - Fix infinite loops and buffer-overrun...

postgresql: stack overflow DoS when parsing json or jsonb inputs

A stack overflow flaw was discovered in the way the PostgreSQL core server processed certain JSON or JSONB input. An authenticated attacker could possibly use this flaw to crash the server backend by sending specially crafted JSON or JSONB input...

Updated postgresql packages fix security vulnerabilities

Josh Kupershmidt discovered the pgCrypto extension could expose several bytes of server memory if the crypt function was provided a too-short salt. An attacker could use this flaw to read private data. CVE-2015-5288 Oskari Saarenmaa discovered that the json and jsonb handlers could exhaust...

CVE-2015-5289

Multiple stack-based buffer overflows in json parsing in PostgreSQL before 9.3.x before 9.3.10 and 9.4.x before 9.4.5 allow attackers to cause a denial of service server crash via unspecified vectors, which are not properly handled in 1 json or 2 jsonb values...