Red Hat Security Advisory: Service Registry (container images) release and security update [2.5.11 GA]
Red Hat Integration - Service Registry 2. 5. 11 GA includes multiple security fixes addressing denial of service, memory leaks, and resource allocation issues in components such as commons-compress, vert. x, and netty-codec-http. These vulnerabilities could lead to denial of service or resource exhaustion under certain conditions. The update is rated as having a moderate security impact by Red Hat Product Security. No known exploits are reported in the wild. The advisory recommends applying the update after ensuring all previous errata are applied.
AI Analysis
Technical Summary
This security advisory covers a release of Red Hat Integration - Service Registry 2.5.11 GA that fixes five vulnerabilities: CVE-2024-25710 (denial of service via infinite loop on corrupted DUMP files in commons-compress), CVE-2024-1023 (memory leak in vert.x due to Netty FastThreadLocal usage), CVE-2024-1300 (memory leak in vert.x when TCP server uses TLS and SNI), CVE-2024-26308 (OutOfMemoryError unpacking broken Pack200 files in commons-compress), and CVE-2024-29025 (resource allocation without limits in netty-codec-http). These issues relate to denial of service and memory/resource exhaustion conditions. The advisory does not provide CVSS scores but classifies the impact as moderate. The update is available as container images from the Red Hat Container Catalog.
Potential Impact
The vulnerabilities fixed in this release can cause denial of service or memory/resource exhaustion in affected components, potentially impacting availability of the Red Hat Integration - Service Registry. There are no reports of exploitation in the wild. The impact is rated moderate by Red Hat Product Security.
Mitigation Recommendations
A security update to Red Hat Integration - Service Registry 2.5.11 GA is available and includes fixes for all listed vulnerabilities. Users should apply this update after ensuring all previously released errata relevant to their system have been applied. No additional mitigation steps are indicated by the vendor advisory.
Red Hat Security Advisory: Service Registry (container images) release and security update [2.5.11 GA]
Description
Red Hat Integration - Service Registry 2. 5. 11 GA includes multiple security fixes addressing denial of service, memory leaks, and resource allocation issues in components such as commons-compress, vert. x, and netty-codec-http. These vulnerabilities could lead to denial of service or resource exhaustion under certain conditions. The update is rated as having a moderate security impact by Red Hat Product Security. No known exploits are reported in the wild. The advisory recommends applying the update after ensuring all previous errata are applied.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This security advisory covers a release of Red Hat Integration - Service Registry 2.5.11 GA that fixes five vulnerabilities: CVE-2024-25710 (denial of service via infinite loop on corrupted DUMP files in commons-compress), CVE-2024-1023 (memory leak in vert.x due to Netty FastThreadLocal usage), CVE-2024-1300 (memory leak in vert.x when TCP server uses TLS and SNI), CVE-2024-26308 (OutOfMemoryError unpacking broken Pack200 files in commons-compress), and CVE-2024-29025 (resource allocation without limits in netty-codec-http). These issues relate to denial of service and memory/resource exhaustion conditions. The advisory does not provide CVSS scores but classifies the impact as moderate. The update is available as container images from the Red Hat Container Catalog.
Potential Impact
The vulnerabilities fixed in this release can cause denial of service or memory/resource exhaustion in affected components, potentially impacting availability of the Red Hat Integration - Service Registry. There are no reports of exploitation in the wild. The impact is rated moderate by Red Hat Product Security.
Mitigation Recommendations
A security update to Red Hat Integration - Service Registry 2.5.11 GA is available and includes fixes for all listed vulnerabilities. Users should apply this update after ensuring all previously released errata relevant to their system have been applied. No additional mitigation steps are indicated by the vendor advisory.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2024:2833
- Cve Count
- 5
- Additional Cves
- ["CVE-2024-1300","CVE-2024-25710","CVE-2024-26308","CVE-2024-29025"]
- Cvss Version
- null
Threat ID: 6a1df669e29bf47b50462470
Added to database: 6/1/2026, 9:15:21 PM
Last enriched: 6/1/2026, 9:24:45 PM
Last updated: 6/2/2026, 12:45:32 AM
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.