Skip to content
fr Sign in
5.3 Medium

CVE-2024-1726 A flaw was discovered in the RESTEasy Reactive implementation in Quarkus

Description

A flaw was discovered in the RESTEasy Reactive implementation in Quarkus. Due to security checks for some JAX-RS endpoints being performed after serialization, more processing resources are consumed while the HTTP request is checked. In certain configurations, if an attacker has knowledge of any POST, PUT, or PATCH request paths, they can potentially identify vulnerable endpoints and trigger excessive resource usage as the endpoints process the requests. This can result in a denial of service.

Affected products and versions

Product Affected versions Fixed in
Red Hat build of Quarkus 3.2.11.Final 3.2 earliest → < 3.2.11.Final-redhat-00001 3.2.11.Final-redhat-00001
Red Hat build of Quarkus Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Red Hat build of Quarkus 3.2.11.Final

The 4 CVEs of Red Hat build of Quarkus 3.2.11.Final →
CVE-2024-1300 Io.vertx:vertx-core: memory leak when a tcp server is configured with tls and sni support 5.4 Medium CVE-2024-1023 Io.vertx/vertx-core: memory leak due to the use of netty fastthreadlocal data structures in vertx 6.5 Medium CVE-2024-1979 A vulnerability was found in Quarkus 3.5 Low
Track this CVE