CVE-2023-5685: Red Hat Build Of Apache Camel - Hawtio 4

High severity, CVSS 7.5. EPSS: 3.5% chance of exploitation in the next 30 days.

A flaw was found in XNIO. The XNIO NotifierState that can cause a Stack Overflow Exception when the chain of notifier states becomes problematically large can lead to uncontrolled resource management and a possible denial of service (DoS).

Affected products

Red Hat Red Hat Build Of Apache Camel - Hawtio 4
Red Hat Red Hat Build Of Apache Camel 4.4.0 For Spring Boot
Red Hat Red Hat Build Of Apache Camel For Spring Boot 3
Red Hat Red Hat Build Of Keycloak
Red Hat Red Hat Data Grid 8
Red Hat Red Hat Integration Camel K 1
Red Hat Red Hat JBoss Data Grid 7
Red Hat Red Hat JBoss Enterprise Application Platform: before 3.8.11.SP1-redhat-00001 (fixed in 3.8.11.SP1-redhat-00001)
Red Hat Red Hat JBoss Enterprise Application Platform 7.1 Eus For Rhel 7: before 0:3.1.16-3.SP1_redhat_00001.1.ep7.el7 (fixed in 0:3.1.16-3.SP1_redhat_00001.1.ep7.el7); before 0:1.7.6-2.redhat_00003.1.ep7.el7 (fixed in 0:1.7.6-2.redhat_00003.1.ep7.el7); before 0:1.68.0-1.redhat_00005.1.ep7.el7 (fixed in 0:1.68.0-1.redhat_00005.1.ep7.el7); before 0:1.4.197-2.redhat_00005.1.ep7.el7 (fixed in 0:1.4.197-2.redhat_00005.1.ep7.el7); before 0:2.8.11.6-1.SP1_redhat_00001.1.ep7.el7 (fixed in 0:2.8.11.6-1.SP1_redhat_00001.1.ep7.el7); before 0:2.0.15-1.Final_redhat_00001.1.ep7.el7 (fixed in 0:2.0.15-1.Final_redhat_00001.1.ep7.el7); …
Red Hat Red Hat JBoss Enterprise Application Platform 7.3 Eus For Rhel 7: before 0:3.4.10-1.SP1_redhat_00001.1.el7eap (fixed in 0:3.4.10-1.SP1_redhat_00001.1.el7eap); before 0:1.7.6-8.redhat_00003.1.el7eap (fixed in 0:1.7.6-8.redhat_00003.1.el7eap); before 0:1.4.197-3.redhat_00004.1.el7eap (fixed in 0:1.4.197-3.redhat_00004.1.el7eap); before 0:2.0.1-4.Final_redhat_00001.1.el7eap (fixed in 0:2.0.1-4.Final_redhat_00001.1.el7eap); before 0:2.0.15-1.Final_redhat_00001.1.el7eap (fixed in 0:2.0.15-1.Final_redhat_00001.1.el7eap); before 0:1.7.2-12.Final_redhat_00013.1.el7eap (fixed in 0:1.7.2-12.Final_redhat_00013.1.el7eap); …
Red Hat Red Hat JBoss Enterprise Application Platform 7.4 For Rhel 8: before 0:3.8.11-1.SP1_redhat_00001.1.el8eap (fixed in 0:3.8.11-1.SP1_redhat_00001.1.el8eap)
Red Hat Red Hat JBoss Enterprise Application Platform 7.4 For Rhel 9: before 0:3.8.11-1.SP1_redhat_00001.1.el9eap (fixed in 0:3.8.11-1.SP1_redhat_00001.1.el9eap)
Red Hat Red Hat JBoss Enterprise Application Platform 7.4 On Rhel 7: before 0:3.8.11-1.SP1_redhat_00001.1.el7eap (fixed in 0:3.8.11-1.SP1_redhat_00001.1.el7eap)
Red Hat Red Hat JBoss Enterprise Application Platform 8
Red Hat Red Hat JBoss Enterprise Application Platform Expansion Pack
Red Hat Red Hat JBoss Fuse Service Works 6
Red Hat Red Hat Process Automation 7
Red Hat Red Hat Single Sign-On 7

Published 2024-03-22. Last modified 2026-09-14.