Medium WID-SEC-2025-0693 1 CVE

Red Hat build of Quarkus: Schwachstelle ermöglicht Denial of Service

Published Apr 2, 2025 · Updated Apr 2, 2025 · de-DE

Vendor: Red Hat Product: Enterprise Linux Platform: Linux

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle im Red Hat build of Quarkus ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

Red Hat Enterprise Linux (RHEL) ist eine populäre Linux-Distribution.

Vulnerabilities 1

High 7.5

CVE-2025-2240

Smallrye-fault-tolerance: smallrye fault tolerance

A flaw was found in Smallrye, where smallrye-fault-tolerance is vulnerable to an out-of-memory (OOM) issue. This vulnerability is externally triggered when calling the metrics URI. Every call creates a new object within meterMap and may lead to a denial of se…

Red Hat Red Hat JBoss Enterprise Application Platform Expansion Pack Red Hat JBoss Enterprise Application Platform 7 Red Hat JBoss Enterprise Application Platform 8 Wolfi Maven

Mar 12, 2025

Revision history

2025-04-02 #1
Initiale Fassung

References

Red Hat Security Advisory vom 2025-04-02
https://access.redhat.com/errata/RHSA-2025:3376
Red Hat Security Advisory vom 2025-04-02
https://access.redhat.com/errata/RHSA-2025:3541