A vulnerability in the Eclipse Vert.x toolkit results in a memory leak due to using Netty FastThreadLocal data structures. Specifically, when the Vert.x HTTP client establishes connections to different hosts, triggering the memory leak. The leak can be accelerated with intimate runtime knowledge, allowing an attacker to exploit this vulnerability. For instance, a server accepting arbitrary internet addresses could serve as an attack vector by connecting to these addresses, thereby accelerating the memory leak.
References
Configurations
No configuration.
History
25 Nov 2024, 03:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-401 |
21 Nov 2024, 08:49
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://access.redhat.com/errata/RHSA-2024:1662 - | |
| References | () https://access.redhat.com/errata/RHSA-2024:1706 - | |
| References | () https://access.redhat.com/errata/RHSA-2024:2088 - | |
| References | () https://access.redhat.com/errata/RHSA-2024:2833 - | |
| References | () https://access.redhat.com/errata/RHSA-2024:3527 - | |
| References | () https://access.redhat.com/errata/RHSA-2024:3989 - | |
| References | () https://access.redhat.com/errata/RHSA-2024:4884 - | |
| References | () https://access.redhat.com/security/cve/CVE-2024-1023 - | |
| References | () https://bugzilla.redhat.com/show_bug.cgi?id=2260840 - | |
| References | () https://github.com/eclipse-vertx/vert.x/issues/5078 - | |
| References | () https://github.com/eclipse-vertx/vert.x/pull/5080 - | |
| References | () https://github.com/eclipse-vertx/vert.x/pull/5082 - |
25 Jul 2024, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
20 Jun 2024, 06:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
31 May 2024, 01:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
14 May 2024, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
29 Apr 2024, 07:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
09 Apr 2024, 12:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
03 Apr 2024, 13:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
27 Mar 2024, 08:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-03-27 08:15
Updated : 2024-11-25 03:15
NVD link : CVE-2024-1023
Mitre link : CVE-2024-1023
CVE.ORG link : CVE-2024-1023
JSON object : View
Products Affected
No product.
CWE
CWE-401
Missing Release of Memory after Effective Lifetime