CVE-2024-1635
CVE-2024-1635: 1 tracked advisory record across Red Hat. Compare vendor sources and published fix guidance.
Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.
Vendor advisory comparison
Red Hat
1 advisory- Advisory severityHigh7.5
High [CVE-2024-1635] out-of-memory error after several closed connections with wildfly-http-client protocol
CVE-2024-1635Source published Source updated
A vulnerability was found in Undertow. This vulnerability impacts a server that supports the wildfly-http-client protocol. Whenever a malicious user opens and closes a connection with the HTTP port of the server and then closes the connection immediately, the server will end with both memory and open file limits exhausted at some point, depending on the amount of memory available. At HTTP upgrade to remoting, the WriteTimeoutStreamSinkConduit leaks connections if RemotingConnection is closed by Remoting ServerConnectionOpenListener. Because the remoting connection originates in Undertow as part of the HTTP upgrade, there is an external layer to the remoting connection. This connection is unaware of the outermost layer when closing the connection during the connection opening procedure.…
- Affected products in this advisory
- Red Hat build of Apache Camel 4.4.1 for Spring Boot 3.2
- Red Hat Fuse 7.13.0
- Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7
- Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7
12 more entries in the full advisory.
- Source-reported affected versions
- Affected-version details not available in this record.
- Source-reported fixed versions
- io.undertow/undertow-core:2.2.30.SP1-redhat-00001
- eap7-activemq-artemis-0:1.5.5.016-1.redhat_00001.1.ep7.el7
- eap7-artemis-native-1:1.5.5.016-1.redhat_00001.1.ep7.el7
- eap7-jboss-xnio-base-0:3.5.11-1.Final_redhat_00001.1.ep7.el7
37 more entries in the full advisory.
- Mitigation guidance
- No mitigation is currently available for this vulnerability. However, there might be some protections, such as request limits by a load balancer in front of JBoss EAP/Wildfly or even Undertow, that could minimize the impact.
Android app · Google Play
Monitor future Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.