CVE-2024-1023

Published: Mar 27, 2024

Modified: Nov 7, 2025

PUBLISHED

CVSS v3.1

6.5

MEDIUM

Description

A vulnerability in the Eclipse Vert.x toolkit results in a memory leak due to using Netty FastThreadLocal data structures. Specifically, when the Vert.x HTTP client establishes connections to different hosts, triggering the memory leak. The leak can be accelerated with intimate runtime knowledge, allowing an attacker to exploit this vulnerability. For instance, a server accepting arbitrary internet addresses could serve as an attack vector by connecting to these addresses, thereby accelerating the memory leak.

Vendor	Product	Versions
Unknown	vertx-core	affected `4.4.5` affected `4.4.6` affected `4.5.0` affected `4.5.1`
Red Hat	CEQ 3.2	All versions
Red Hat	Cryostat 2 on RHEL 8	unaffected `2.4.0-7 - < *`
Red Hat	Cryostat 2 on RHEL 8	unaffected `2.4.0-4 - < *`
Red Hat	Cryostat 2 on RHEL 8	unaffected `2.4.0-4 - < *`
Red Hat	Cryostat 2 on RHEL 8	unaffected `2.4.0-4 - < *`
Red Hat	Cryostat 2 on RHEL 8	unaffected `2.4.0-9 - < *`
Red Hat	Cryostat 2 on RHEL 8	unaffected `2.4.0-4 - < *`
Red Hat	MTA-6.2-RHEL-9	unaffected `6.2.3-2 - < *`
Red Hat	Red Hat AMQ Streams 2.7.0	All versions
Red Hat	Red Hat build of Apache Camel 4.4.1 for Spring Boot 3.2	All versions
Red Hat	Red Hat build of Quarkus 3.2.11.Final	unaffected `4.4.8.redhat-00001 - < *`
Red Hat	RHINT Service Registry 2.5.11 GA	All versions
Red Hat	A-MQ Clients 2	All versions
Red Hat	Migration Toolkit for Runtimes	All versions
Red Hat	OpenShift Serverless	All versions
Red Hat	Red Hat AMQ Broker 7	All versions
Red Hat	Red Hat build of Apache Camel for Spring Boot 3	All versions
Red Hat	Red Hat Build of Keycloak	All versions
Red Hat	Red Hat build of OptaPlanner 8	All versions
Red Hat	Red Hat build of Quarkus	All versions
Red Hat	Red Hat Data Grid 8	All versions
Red Hat	Red Hat Fuse 7	All versions
Red Hat	Red Hat Integration Camel K 1	All versions
Red Hat	Red Hat Integration Camel Quarkus 2	All versions
Red Hat	Red Hat JBoss Data Grid 7	All versions
Red Hat	Red Hat JBoss Enterprise Application Platform 7	All versions
Red Hat	Red Hat JBoss Enterprise Application Platform 8	All versions
Red Hat	Red Hat JBoss Enterprise Application Platform Expansion Pack	All versions
Red Hat	Red Hat Process Automation 7	All versions