Описание
A vulnerability was found in the Infinispan component in Red Hat Data Grid. The REST compare API may have a buffer leak and an out of memory error can occur when sending continual requests with large POST data to the REST API.
Отчет
The REST endpoint is secured (= authentication is required) by default in RHDG, so it is not possible for an anonymous attacker to utilize this issue.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Data Grid 8 | infinispan | Affected | ||
| Red Hat JBoss Data Grid 7 | infinispan | Will not fix |
Показывать по
Дополнительная информация
Статус:
6.5 Medium
CVSS3
Связанные уязвимости
A vulnerability was found in the Infinispan component in Red Hat Data Grid. The REST compare API may have a buffer leak and an out of memory error can occur when sending continual requests with large POST data to the REST API.
Infinispan Potential Out of Memory Error via REST Compare API Buffer API
Уязвимость компонента Infinispan распределенной системы управления данными в памяти Red Hat JBoss Data Grid, позволяющая нарушителю вызвать отказ в обслуживании
6.5 Medium
CVSS3