We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2024-6875

Infinispan: infinispan: rest compare api has buffer leak



Description

A vulnerability was found in the Infinispan component in Red Hat Data Grid. The REST compare API may have a buffer leak and an out of memory error can occur when sending continual requests with large POST data to the REST API.

Reserved 2024-07-18 | Published 2025-03-28 | Updated 2025-05-06 | Assigner redhat


MEDIUM: 6.5CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Problem types

Missing Release of Memory after Effective Lifetime

Product status

Default status
unaffected

Any version before 15.0.6
affected

Default status
affected

Default status
affected

Timeline

2024-07-18:Reported to Red Hat.
2025-03-28:Made public.

References

access.redhat.com/security/cve/CVE-2024-6875 vdb-entry

bugzilla.redhat.com/show_bug.cgi?id=2298555 (RHBZ#2298555) issue-tracking

cve.org (CVE-2024-6875)

nvd.nist.gov (CVE-2024-6875)

Download JSON

Share this page
https://cve.threatint.eu/CVE/CVE-2024-6875

Support options

Helpdesk Chat, Email, Knowledgebase