5.3
Moyenne
CVE-2024-1726 A flaw was discovered in the RESTEasy Reactive implementation in Quarkus
Description
A flaw was discovered in the RESTEasy Reactive implementation in Quarkus. Due to security checks for some JAX-RS endpoints being performed after serialization, more processing resources are consumed while the HTTP request is checked. In certain configurations, if an attacker has knowledge of any POST, PUT, or PATCH request paths, they can potentially identify vulnerable endpoints and trigger excessive resource usage as the endpoints process the requests. This can result in a denial of service.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Red Hat build of Quarkus 3.2.11.Final 3.2 | premières → < 3.2.11.Final-redhat-00001 | 3.2.11.Final-redhat-00001 |
| Red Hat build of Quarkus | Versions non publiées |
Références
- RHSA-2024:1662 access.redhat.com
- access.redhat.com access.redhat.com
- RHBZ#2265158 bugzilla.redhat.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Red Hat build of Quarkus 3.2.11.Final
Les 4 CVE de Red Hat build of Quarkus 3.2.11.Final →
CVE-2024-1300
Io.vertx:vertx-core: memory leak when a tcp server is configured with tls and sni support
5.4
Moyenne
CVE-2024-1023
Io.vertx/vertx-core: memory leak due to the use of netty fastthreadlocal data structures in vertx
6.5
Moyenne
CVE-2024-1979
A vulnerability was found in Quarkus
3.5
Faible