Moderate severity vulnerability that affects io.vertx:vertx-core

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2018-12544 · ADVISORY
• vert-x3/vertx-web · WEB
• vert-x3/vertx-web commit ac8692c · WEB
• access.redhat.com/errata/RHSA-2018:2946 · WEB
• bugs.eclipse.org/bugs/show_bug.cgi · WEB
• GitHub Advisory GHSA-qh3m-qw6v-qvhg · ADVISORY
• lists.apache.org/thread.html/rd0e44e8ef71eeaaa3cf3d1b8b41eb25894372e2995ec908ce7624d26@%3Ccommits.pulsar.apache.org%3E · WEB
• lists.apache.org/thread.html/rd0e44e8ef71eeaaa3cf3d1b8b41eb25894372e2995ec908ce7624d26%40%3Ccommits.pulsar.apache.org%3E

io.vertx:vertx-core のその他の脆弱性

• CVE-2026-6860中 5.3A TCP client can perform a TLS handshake and present the server name extension with a server name that is accepted by a server wildcard name…
• CVE-2026-1002中 5.3The Vert.x Web static handler component cache can be manipulated to deny the access to static files served by the handler using specifically…
• CVE-2024-1300中 5.4A vulnerability in the Eclipse Vert.x toolkit causes a memory leak in TCP servers configured with TLS and SNI support. When processing an un…
• CVE-2024-1023中 6.5A vulnerability in the Eclipse Vert.x toolkit results in a memory leak due to using Netty FastThreadLocal data structures. Specifically, whe…
• CVE-2018-12541中 6.5In version from 3.0.0 to 3.5.3 of Eclipse Vert.x, the WebSocket HTTP upgrade implementation buffers the full http request before doing the h…