Lucene search
+L

761 matches found

Veracode
Veracode
•added 2025/03/05 4:00 a.m.•17 views

Denial Of Service (DoS)

io.quarkus, quarkus-resteasy is vulnerable to Denial Of Service DoS. The vulnerability is due to improper resource management, where a buffer is not correctly released when a client request times out. It allows an attacker to trigger memory leaks by sending multiple client requests with low...

7.5CVSS7.2AI score0.00821EPSS
SaveExploits0References17Affected Software1
Tenable Nessus
Tenable Nessus
•added 2025/03/05 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2020-25633

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in RESTEasy client in all versions of RESTEasy up to 4.5.6.Final. It may allow client users to obtain the server's potentially sensitive...

5.3CVSS6.4AI score0.01178EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2025/03/04 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2021-20289

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final. The endpoint class and method names are returned as part of the exception response...

5.3CVSS6.6AI score0.014EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2025/03/04 12:00 a.m.•12 views

Linux Distros Unpatched Vulnerability : CVE-2016-6346

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RESTEasy enables GZIPInterceptor, which allows remote attackers to cause a denial of service via unspecified vectors. CVE-2016-6346 Note that Nessus relies on t...

7.5CVSS7.3AI score0.05601EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/03/04 12:00 a.m.•14 views

Linux Distros Unpatched Vulnerability : CVE-2021-20293

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A reflected Cross-Site Scripting XSS flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final, where it did not properly handle URL encoding whe...

6.1CVSS6.2AI score0.00856EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
•added 2025/03/03 1:23 p.m.•13 views

io.quarkus:quarkus-resteasy: Memory Leak in Quarkus RESTEasy Classic When Client Requests Timeout

A flaw was found in the quarkus-resteasy extension, which causes memory leaks when client requests with low timeouts are made. If a client request times out, a buffer is not released correctly, leading to increased memory usage and eventual application crash due to OutOfMemoryError...

7.5CVSS5.9AI score0.00821EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2025/02/27 3:15 p.m.•17 views

io.quarkus:quarkus-resteasy: Memory Leak in Quarkus RESTEasy Classic When Client Requests Timeout

A flaw was found in the quarkus-resteasy extension, which causes memory leaks when client requests with low timeouts are made. If a client request times out, a buffer is not released correctly, leading to increased memory usage and eventual application crash due to OutOfMemoryError...

7.5CVSS5.9AI score0.00821EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2025/02/27 1:16 p.m.•20 views

io.quarkus:quarkus-resteasy: Memory Leak in Quarkus RESTEasy Classic When Client Requests Timeout

A flaw was found in the quarkus-resteasy extension, which causes memory leaks when client requests with low timeouts are made. If a client request times out, a buffer is not released correctly, leading to increased memory usage and eventual application crash due to OutOfMemoryError...

7.5CVSS5.9AI score0.00821EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
•added 2025/02/26 6:30 p.m.•32 views

io.quarkus:quarkus-resteasy: Memory Leak in Quarkus RESTEasy Classic When Client Requests Timeout

A flaw was found in the quarkus-resteasy extension, which causes memory leaks when client requests with low timeouts are made. If a client request times out, a buffer is not released correctly, leading to increased memory usage and eventual application crash due to OutOfMemoryError...

7.5CVSS7.6AI score0.00821EPSS
SaveExploits0References18Affected Software1
OSV
OSV
•added 2025/02/26 6:30 p.m.•13 views

GHSA-4FWR-MH5Q-HCHH io.quarkus:quarkus-resteasy: Memory Leak in Quarkus RESTEasy Classic When Client Requests Timeout

A flaw was found in the quarkus-resteasy extension, which causes memory leaks when client requests with low timeouts are made. If a client request times out, a buffer is not released correctly, leading to increased memory usage and eventual application crash due to OutOfMemoryError...

7.5CVSS6AI score0.00821EPSS
SaveExploits0References18
attackerkb
attackerkb
•added 2025/02/26 5:15 p.m.•12 views

CVE-2025-1634

A flaw was found in the quarkus-resteasy extension, which causes memory leaks when client requests with low timeouts are made. If a client request times out, a buffer is not released correctly, leading to increased memory usage and eventual application crash due to OutOfMemoryError...

7.5CVSS7.3AI score0.00821EPSS
SaveExploits0References11
NVD
NVD
•added 2025/02/26 5:15 p.m.•21 views

CVE-2025-1634

A flaw was found in the quarkus-resteasy extension, which causes memory leaks when client requests with low timeouts are made. If a client request times out, a buffer is not released correctly, leading to increased memory usage and eventual application crash due to OutOfMemoryError...

7.5CVSS0.00821EPSS
SaveExploits0References10
CVE
CVE
•added 2025/02/26 4:56 p.m.•306 views

CVE-2025-1634

CVE-2025-1634 affects the quarkus-resteasy extension; memory leaks occur when client requests have low timeouts, where a buffer is not released on timeout, causing increased memory usage and potentially OutOfMemoryError. Public details in IBM bulletins confirm the issue and provide remediation gu...

7.5CVSS7.6AI score0.00821EPSS
SaveExploits0References10
Cvelist
Cvelist
•added 2025/02/26 4:56 p.m.•31 views

CVE-2025-1634 Io.quarkus:quarkus-resteasy: memory leak in quarkus resteasy classic when client requests timeout

A flaw was found in the quarkus-resteasy extension, which causes memory leaks when client requests with low timeouts are made. If a client request times out, a buffer is not released correctly, leading to increased memory usage and eventual application crash due to OutOfMemoryError...

7.5CVSS0.00821EPSS
SaveExploits0References10
Vulnrichment
Vulnrichment
•added 2025/02/26 4:56 p.m.•12 views

CVE-2025-1634 Io.quarkus:quarkus-resteasy: memory leak in quarkus resteasy classic when client requests timeout

A flaw was found in the quarkus-resteasy extension, which causes memory leaks when client requests with low timeouts are made. If a client request times out, a buffer is not released correctly, leading to increased memory usage and eventual application crash due to OutOfMemoryError...

7.5CVSS7.5AI score0.00821EPSS
SaveExploits0References10
OSV
OSV
•added 2025/02/26 4:56 p.m.•16 views

CVE-2025-1634 Io.quarkus:quarkus-resteasy: memory leak in quarkus resteasy classic when client requests timeout

A flaw was found in the quarkus-resteasy extension, which causes memory leaks when client requests with low timeouts are made. If a client request times out, a buffer is not released correctly, leading to increased memory usage and eventual application crash due to OutOfMemoryError...

7.5CVSS7.2AI score
SaveExploits0References14
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/26 12:00 a.m.•2 views

CVE-2025-1634: Missing Release of Memory after Effective Lifetime

A flaw was found in the quarkus-resteasy extension, which causes memory leaks when client requests with low timeouts are made. If a client request times out, a buffer is not released correctly, leading to increased memory usage and eventual application crash due to OutOfMemoryError...

7.5CVSS7.3AI score0.00821EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/02/26 12:00 a.m.•11 views

PT-2025-8737

Name of the Vulnerable Software and Affected Versions quarkus-resteasy extension affected versions not specified Description A flaw in the quarkus-resteasy extension causes memory leaks when client requests with low timeouts are made. If a client request times out, a buffer is not released...

7.5CVSS7AI score0.00821EPSS
SaveExploits0References28
Snyk
Snyk
•added 2025/02/24 12:00 a.m.•7 views

Missing Release of Memory after Effective Lifetime

Overview Affected versions of this package are vulnerable to Missing Release of Memory after Effective Lifetime due to the handling of HTTP requests with low timeouts which allows an unauthenticated attacker to repeatedly send specially crafted requests that trigger a memory leak. Remediation...

8.7CVSS7AI score0.00821EPSS
SaveExploits0References2
Snyk
Snyk
•added 2025/02/13 3:31 p.m.•8 views

Exposure of Data Element to Wrong Session

Overview Affected versions of this package are vulnerable to Exposure of Data Element to Wrong Session due to the shared instance used in field injection without a CDI scope. An attacker can manipulate request data, impersonate users, or access sensitive information by exploiting the leakage of...

8.7CVSS7AI score0.00791EPSS
SaveExploits0References2
Rows per page
Query Builder