VDB
CVE-2024-3653
CVE-2024-3653
PUBLISHED
Es bestehen mehrere Schwachstellen im Red Hat Build von Quarkus. Diese Fehler existieren in den Komponenten Undertow und Eclipse Vert.x, die die JBoss Enterprise Application Platform betreffen. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen.
EPSS 4.43% · 89.2th percentile
Risk Scores
EPSS Score
4.43%
89.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 | |
| Red Hat | Red Hat JBoss Enterprise Application Platform 7.1.0 | |
| Red Hat | Red Hat JBoss Enterprise Application Platform 8 | |
| Red Hat | Red Hat JBoss Enterprise Application Platform Quarkus <3.8.6 | |
| Red Hat | Red Hat Enterprise Linux |
Exploit Intelligence
- https://security.netapp.com/advisory/ntap-20240828-0002/ (circl)
- RHSA-2024:4392 (circl)
- RHSA-2024:5143 (circl)
- RHSA-2024:5144 (circl)
- RHSA-2024:5145 (circl)
- RHSA-2024:5147 (circl)
- RHSA-2024:6437 (circl)
- https://access.redhat.com/security/cve/CVE-2024-3653 (circl)
- RHBZ#2274437 (circl)
Timeline
- Jul 8, 2024 CVE Published
- Jul 9, 2024 EPSS Score
- Oct 4, 2024 Coalition ESS Score
- Mar 17, 2025 EPSS Score
- Mar 27, 2025 EPSS Score
- Mar 28, 2025 EPSS Score
- Mar 30, 2025 EPSS Score
- Apr 3, 2025 EPSS Score
- Apr 14, 2025 EPSS Score
- Apr 16, 2025 EPSS Score
- Apr 18, 2025 EPSS Score
- May 4, 2025 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-2206.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-2206 advisory
- https://access.redhat.com/errata/RHSA-2024:6437 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2274437 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2309758 advisory
- https://access.redhat.com/errata/RHSA-2024:7052 advisory
- https://access.redhat.com/errata/RHSA-2024:8023 advisory
- https://access.redhat.com/errata/RHSA-2025:0542 advisory