Red Hat Security Advisory: Red Hat Build of Apache Camel for Quarkus 2.13.3 security update (RHBQ 2.13.9.Final)
Red Hat has released a security update for its Build of Apache Camel for Quarkus 2.13.3, upgrading to version 2.13.9.Final. This update addresses multiple security issues including memory exhaustion and denial of service vulnerabilities in various components such as JSON-java, Apache Avro Java SDK, Apache Mina SSHD, Netty, and Snappy-java. The update is rated as having an important impact by Red Hat Product Security. No CVSS scores are provided for these vulnerabilities. No known exploits in the wild have been reported at this time.
AI Analysis
Technical Summary
This security update for Red Hat Build of Apache Camel for Quarkus 2.13.3 (updated to 2.13.9.Final) fixes several vulnerabilities: CVE-2023-5072 involves a parser confusion in JSON-java leading to out-of-memory (OOM) conditions; CVE-2023-39410 addresses memory exhaustion when deserializing untrusted data in the Apache Avro Java SDK; CVE-2023-35887 concerns information exposure in Apache Mina SSHD's SFTP server implementations; CVE-2023-34462 fixes an OOM issue caused by large memory allocation in Netty's SniHandler; and CVE-2023-34455 resolves a denial of service vulnerability due to unchecked chunk length in Snappy-java. These fixes collectively mitigate risks of memory exhaustion, denial of service, and information exposure in the affected components.
Potential Impact
The vulnerabilities fixed by this update can lead to out-of-memory conditions causing denial of service, and information exposure in SFTP server implementations. These issues could impact the availability and confidentiality of systems running the affected software. No active exploitation has been reported.
Mitigation Recommendations
A security update is available that upgrades Red Hat Build of Apache Camel for Quarkus from 2.13.3 to 2.13.9.Final, which addresses the listed vulnerabilities. Users should apply this update promptly to mitigate the risks. No additional mitigation steps are indicated by the vendor advisory.
Red Hat Security Advisory: Red Hat Build of Apache Camel for Quarkus 2.13.3 security update (RHBQ 2.13.9.Final)
Description
Red Hat has released a security update for its Build of Apache Camel for Quarkus 2.13.3, upgrading to version 2.13.9.Final. This update addresses multiple security issues including memory exhaustion and denial of service vulnerabilities in various components such as JSON-java, Apache Avro Java SDK, Apache Mina SSHD, Netty, and Snappy-java. The update is rated as having an important impact by Red Hat Product Security. No CVSS scores are provided for these vulnerabilities. No known exploits in the wild have been reported at this time.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This security update for Red Hat Build of Apache Camel for Quarkus 2.13.3 (updated to 2.13.9.Final) fixes several vulnerabilities: CVE-2023-5072 involves a parser confusion in JSON-java leading to out-of-memory (OOM) conditions; CVE-2023-39410 addresses memory exhaustion when deserializing untrusted data in the Apache Avro Java SDK; CVE-2023-35887 concerns information exposure in Apache Mina SSHD's SFTP server implementations; CVE-2023-34462 fixes an OOM issue caused by large memory allocation in Netty's SniHandler; and CVE-2023-34455 resolves a denial of service vulnerability due to unchecked chunk length in Snappy-java. These fixes collectively mitigate risks of memory exhaustion, denial of service, and information exposure in the affected components.
Potential Impact
The vulnerabilities fixed by this update can lead to out-of-memory conditions causing denial of service, and information exposure in SFTP server implementations. These issues could impact the availability and confidentiality of systems running the affected software. No active exploitation has been reported.
Mitigation Recommendations
A security update is available that upgrades Red Hat Build of Apache Camel for Quarkus from 2.13.3 to 2.13.9.Final, which addresses the listed vulnerabilities. Users should apply this update promptly to mitigate the risks. No additional mitigation steps are indicated by the vendor advisory.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_informational_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2023:7705
- Cve Count
- 0
- Additional Cves
- []
- Cvss Version
- null
Threat ID: 6a71feebbf8831d539ff0d12
Added to database: 08/04/2026, 15:02:03 UTC
Last enriched: 08/04/2026, 15:10:47 UTC
Last updated: 08/04/2026, 15:10:47 UTC
Views: 2
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.