Cpe:2.3:a:redhat:resteasy:*:*:*:*:*:*:*:*

A vulnerability in the Resteasy component of Red Hat Enterprise Linux allows a remote, unauthenticated attacker to disclose sensitive information.

An unauthenticated remote attacker can trigger a denial of service in Red Hat RESTEasy by submitting a crafted image that causes excessive memory allocation within the JVM via the IIOImageProvider component.