CVE-2024-1726
CVE-2024-1726: 1 tracked advisory record across Red Hat. Compare vendor sources and published fix guidance.
Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.
Vendor advisory comparison
Red Hat
1 advisory- Advisory severityMedium5.3
Medium [CVE-2024-1726] security checks for some inherited endpoints performed after serialization in resteasy reactive may trigger a denial of service
CVE-2024-1726Source published Source updated
A flaw was discovered in the RESTEasy Reactive implementation in Quarkus. Due to security checks for some JAX-RS endpoints being performed after serialization, more processing resources are consumed while the HTTP request is checked. In certain configurations, if an attacker has knowledge of any POST, PUT, or PATCH request paths, they can potentially identify vulnerable endpoints and trigger excessive resource usage as the endpoints process the requests. This can result in a denial of service. Affected products named by the advisory: Red Hat build of Quarkus 3.2.11.Final; Red Hat build of Quarkus.
- Affected products in this advisory
- Red Hat build of Quarkus 3.2.11.Final
- Source-reported affected versions
- before 3.2.11.Final
- 3.3.0.CR1 before 3.7.4
- 3.8.0.CR1
- Source-reported fixed versions
- 3.2.11.Final
- 3.7.4
- Mitigation guidance
- In certain configurations, if an attacker has knowledge of any POST, PUT, or PATCH request paths, they can potentially identify vulnerable endpoints and trigger excessive resource usage as the endpoints process the requests.
Android app · Google Play
Monitor future Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.