VDB
BDU%3A2024-09483
BDU%3A2024-09483
PUBLISHED
CVSS 5.400000095367432 MEDIUM
Уязвимость набора инструментов Eclipse Vert.x, связанная с утечкой памяти, позволяющая нарушителю раскрыть защищаемую информацию или вызвать отказ в обслуживании
Risk Scores
CVSS 3.1
5.400000095367432
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Red Hat build of Apache Camel 4.4.1 for Spring Boot 3.2 | |
| Red Hat | Red Hat Fuse 7 | |
| Red Hat | Red Hat Integration Camel Quarkus 2 | |
| Red Hat | Red Hat AMQ Streams 2.7.0 | |
| Red Hat | CEQ 3.2 | |
| Red Hat | RHINT Service Registry 2.5.11 GA | |
| Red Hat | Migration Toolkit for Runtimes 1 on RHEL 8 | 1.2-18 |
| Red Hat | Migration Toolkit for Runtimes 1 on RHEL 8 | 1.2-12 |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8 | |
| Red Hat | OpenShift Serverless | |
| Red Hat | Red Hat build of Quarkus | |
| 4.3.4 | ||
| Red Hat | Red Hat JBoss Enterprise Application Platform Expansion Pack | |
| Red Hat | Cryostat 2 on RHEL 8 | 2.4.0-4 |
| Red Hat | Red Hat Data Grid 8 | |
| Red Hat | Red Hat Build of Keycloak | |
| Red Hat | Red Hat build of Quarkus 3.2.11.Final | 4.4.8.redhat-00001 |
| Red Hat | Red Hat JBoss Data Grid 7 | |
| Red Hat | Cryostat 2 on RHEL 8 | 2.4.0-7 |
| Red Hat Inc. | Cryostat, Migration Toolkit for Runtimes, Vert.x |
…and 14 more
Exploit Intelligence
- CIRCL seen: CVE-2024-1300 (circl-sighting)
- CIRCL seen: CVE-2024-1300 (circl-sighting)
- RHSA-2024:2833 (circl)
- RHSA-2024:1706 (circl)
- RHSA-2024:1923 (circl)
- RHSA-2024:2088 (circl)
- RHSA-2024:3527 (circl)
- RHSA-2024:3989 (circl)
- RHSA-2024:4884 (circl)
- https://vertx.io/docs/vertx-core/java/#_server_name_indication_sni. (circl)
…and 3 more exploits
Timeline
- Feb 7, 2024 PoC Published
- Mar 1, 2024 PoC Published
- Apr 2, 2024 CVE Published
- Nov 14, 2024 CVE Updated
- Jun 9, 2026 Distribution Patch
- Jun 9, 2026 Distribution Patch
- Jun 9, 2026 Distribution Patch
- Jun 9, 2026 Distribution Patch
- Jun 9, 2026 Distribution Patch
- Jun 9, 2026 Distribution Patch
- Jun 9, 2026 Distribution Patch
- Jun 9, 2026 Distribution Patch
References
- https://access.redhat.com/security/cve/CVE-2024-1300 url
- https://bugzilla.redhat.com/show_bug.cgi?id=2263139 url
- RHSA-2024:1662 vendor-advisory
- RHSA-2024:1706 vendor-advisory
- RHSA-2024:1923 vendor-advisory
- RHSA-2024:2088 vendor-advisory
- RHSA-2024:2833 vendor-advisory
- RHSA-2024:3527 vendor-advisory
- RHSA-2024:3989 vendor-advisory
- RHSA-2024:4884 vendor-advisory
- https://vertx.io/docs/vertx-core/java/#_server_name_indication_sni. url