What is RHSA-2023:7617?

RHSA-2023:7617 is a security advisory published by Red Hat Product Security with High severity. Red Hat Security Advisory: Red Hat Build of Apache Camel for Quarkus 3.2.0 release (RHBQ 3.2.9.Final)

Which CVE IDs does RHSA-2023:7617 cover?

RHSA-2023:7617 covers the following CVE IDs: CVE-2023-5072, CVE-2023-39410. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2023:7617?

RHSA-2023:7617 has a CVSS v3 base score of 7.5, published by Red Hat Product Security.

Which products are affected by RHSA-2023:7617?

RHSA-2023:7617 affects 1 product, including: Red Hat build of Apache Camel 4 for Quarkus 3.

RHSA-2023:7617HighCVSS 7.5

Red Hat Security Advisory: Red Hat Build of Apache Camel for Quarkus 3.2.0 release (RHBQ 3.2.9.Final)

Vendor

Red Hat Product Security

Published

November 30, 2023

Last Modified

September 14, 2026

🔗 CVE IDs covered (2)

CVE-2023-5072 →CVE-2023-39410 →

📋 Description

CVE-2023-5072 — JSON-java: parser confusion leads to OOM CVE-2023-39410 — apache-avro: Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK

🎯 Affected products1

Red Hat build of Apache Camel 4 for Quarkus 3

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: No current mitigation is available for this flaw.

🔗 References (6)

selfhttps://access.redhat.com/errata/RHSA-2023:7617
externalhttps://access.redhat.com/security/updates/classification/#important
externalhttps://access.redhat.com/security/cve/CVE-2023-39410
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2242521
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=2246417
selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_7617.json