Threats Tagged 'cve-2024-1023'

Red Hat Integration - Service Registry 2.5.11 GA includes multiple security fixes addressing denial of service, memory leaks, and resource allocation issues in underlying components such as commons-compress, vert.x, and netty-codec-http. These vulnerabilities could lead to service disruption or resource exhaustion. The update is rated with a moderate security impact by Red Hat Product Security. No CVSS scores are provided in the advisory. The update is available as container images from the Red Hat Container Catalog.

A vulnerability in the Eclipse Vert.x toolkit results in a memory leak due to using Netty FastThreadLocal data structures. Specifically, when the Vert.x HTTP client establishes connections to different hosts, triggering the memory leak. The leak can be accelerated with intimate runtime knowledge, allowing an attacker to exploit this vulnerability. For instance, a server accepting arbitrary internet addresses could serve as an attack vector by connecting to these addresses, thereby accelerating the memory leak.