Skip to content
OpenAdvisories
Medium · 6.5 CVE-2024-6875 EUVD-2024-54328GHSA-2q39-w2hw-2pjm

Infinispan: infinispan: rest compare api has buffer leak

Published Mar 28, 2025 · Updated Jun 26, 2026 · Assigned by redhat

Description

A vulnerability was found in the Infinispan component in Red Hat Data Grid. The REST compare API may have a buffer leak and an out of memory error can occur when sending continual requests with large POST data to the REST API.

Affected products

VendorProductAffectedFixed
— infinispan < 15.0.6 15.0.6
Red Hat Red Hat Data Grid 8 — —
Red Hat Red Hat JBoss Data Grid 7 — —

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.infinispan:infinispan-query 15.1.0.Dev01 — GHSA-2q39-w2hw-2pjm
Maven org.infinispan:infinispan-query <= 15.0.5.Final — GHSA-2q39-w2hw-2pjm

References