medium6.5
CVE-2024-6875
Infinispan Potential Out of Memory Error via REST Compare API Buffer API
Impact
A vulnerability was found in the Infinispan component in Red Hat Data Grid. The REST compare API may have a buffer leak and an out of memory error can occur when sending continual requests with large POST data to the REST API.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | org.infinispan:infinispan-query | = 15.1.0.Dev01 | none recorded |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://access.redhat.com/security/cve/CVE-2024-6875
- https://bugzilla.redhat.com/show_bug.cgi?id=2298555
- https://github.com/infinispan/infinispan/pull/12645
- https://github.com/infinispan/infinispan/pull/12663
- https://issues.redhat.com/browse/JDG-7169
- https://github.com/advisories/GHSA-2q39-w2hw-2pjm
- https://nvd.nist.gov/vuln/detail/CVE-2024-6875