CVE-2024-8391 is a vulnerability in the io.vertx/vertx-grpc server used by Red Hat JBoss EAP XP 5.0 where the server does not enforce a maximum message size limit. This could allow an attacker to send excessively large messages, potentially leading to resource exhaustion or denial of service. Red Hat has issued JBoss EAP XP 5.0 Update 1.0 as a security fix to address this issue. The vulnerability is categorized under CWE-770 (Allocation of Resources Without Limits or Throttling).

The vulnerability could allow an attacker to cause resource exhaustion on the affected system by sending gRPC messages that exceed expected size limits. This may result in denial of service or degraded performance of the JBoss EAP XP 5.0 server. No known exploits in the wild have been reported at this time.

Red Hat has released JBoss EAP XP 5.0 Update 1.0 which includes a fix for CVE-2024-8391. Users of affected versions (>=5.0.0 <5.0.1) should apply this update following the official Red Hat documentation. No additional mitigation steps are indicated by the vendor advisory.