REDHAT-BUG-2298828: Input Validation
Published Jul 19, 2024
·Updated
An improper input validation of the p2c parameter in the Apache CXF JOSE code before 4.0.5, 3.6.4 and 3.5.9 allows an attacker to perform a denial of service attack by specifying a large value for this parameter in a token.
Affected Software
1 affected component
Apache CXF<4.0.5
Event History
Jul 19, 2024
Data Sourced
via Red Hat·09:20 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of REDHAT-BUG-2298828?
The severity of REDHAT-BUG-2298828 is significant as it allows denial of service attacks through improper input validation.
2
How do I fix REDHAT-BUG-2298828?
To fix REDHAT-BUG-2298828, upgrade Apache CXF to version 4.0.5 or later, or to 3.6.4 or later, or to 3.5.9 or later.
3
What versions of Apache CXF are affected by REDHAT-BUG-2298828?
Versions of Apache CXF affected by REDHAT-BUG-2298828 are those prior to 4.0.5, 3.6.4, and 3.5.9.
4
What type of attack does REDHAT-BUG-2298828 enable?
REDAHT-BUG-2298828 enables attackers to perform denial of service attacks.
5
Is input validation an issue in REDHAT-BUG-2298828?
Yes, improper input validation of the p2c parameter is a critical issue in REDHAT-BUG-2298828.