https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 20:20:49 +0000 https://cve.radiocsirt.org/vuln/cve-2023-6563 <p><strong>Affected:</strong> Red Hat Single Sign-On 7.6 for RHEL 7, Red Hat Single Sign-On 7.6 for RHEL 8, Red Hat Single Sign-On 7.6 for RHEL 9, Red Hat RHEL-8 based Middleware Containers, Red Hat Single Sign-On 7.6.6, Red Hat Build of Keycloak</p> <p>An unconstrained memory consumption vulnerability was discovered in Keycloak. It can be triggered in environments which have millions of offline tokens (&gt; 500,000 users with each having at least 2 saved sessions). If an attacker creates two or more user sessions and then open the &#34;consents&#34; tab of the admin User Interface, the UI attempts to load a huge number of offline client sessions leading to excessive memory and CPU consumption which could potentially crash the entire system.</p> <p><strong>Affected:</strong> Red Hat Single Sign-On 7.6 for RHEL 7, Red Hat Single Sign-On 7.6 for RHEL 8, Red Hat Single Sign-On 7.6 for RHEL 9, Red Hat RHEL-8 based Middleware Containers, Red Hat Single Sign-On 7.6.6, Red Hat Build of Keycloak</p> <p>An unconstrained memory consumption vulnerability was discovered in Keycloak. It can be triggered in environments which have millions of offline tokens (&gt; 500,000 users with each having at least 2 saved sessions). If an attacker creates two or more user sessions and then open the &#34;consents&#34; tab of the admin User Interface, the UI attempts to load a huge number of offline client sessions leading to excessive memory and CPU consumption which could potentially crash the entire system.</p> https://cve.radiocsirt.org/vuln/cve-2023-6563