Description
A flaw was found in the Netty STOMP codec. A remote attacker could send a specially crafted STOMP frame with a content-length header exceeding the maximum integer value. This integer truncation vulnerability could lead to an infinite decode loop, causing a Denial of Service (DoS) by exhausting memory and CPU resources.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Red Hat Red Hat build of Apache Camel for Spring Boot 4
Default version status: affected
Red Hat Red Hat Fuse 7
Default version status: unknown
Red Hat Red Hat JBoss Enterprise Application Platform 7
Default version status: unknown
Red Hat Red Hat JBoss Enterprise Application Platform 7
Default version status: unknown
Red Hat Red Hat JBoss Enterprise Application Platform 7
Default version status: unknown
Red Hat Red Hat JBoss Enterprise Application Platform 7
Default version status: unknown
Red Hat Red Hat Single Sign-On 7
Default version status: unknown