Threats Tagged 'cve-2024-1597'

Red Hat Integration Camel K 1.10.7 includes a security update addressing a vulnerability in the PostgreSQL JDBC Driver (pgjdbc). The vulnerability (CVE-2024-1597) allows an attacker to perform SQL injection when the driver is configured with PreferQueryMode=SIMPLE. This issue has been rated as important by Red Hat Product Security. The update fixes this vulnerability and is recommended to be applied after ensuring all previous relevant errata are installed.

Red Hat Integration - Service Registry 2.5.11 GA includes multiple security fixes addressing denial of service, memory leaks, and resource allocation issues in underlying components such as commons-compress, vert.x, and netty-codec-http. These vulnerabilities could lead to service disruption or resource exhaustion. The update is rated with a moderate security impact by Red Hat Product Security. No CVSS scores are provided in the advisory. The update is available as container images from the Red Hat Container Catalog.

Red Hat has released a security update for Red Hat build of Quarkus 2.13.9.SP2 addressing three vulnerabilities: CVE-2024-1597, which allows SQL injection via the PostgreSQL JDBC Driver when using PreferQueryMode=SIMPLE; CVE-2024-25710, a denial of service caused by an infinite loop when processing corrupted DUMP files in Apache Commons Compress; and CVE-2024-26308, which can cause an OutOfMemoryError when unpacking broken Pack200 files in Apache Commons Compress. These issues are rated as important by Red Hat and are fixed in this update. Users should apply this update after ensuring all prior relevant errata are installed.