CVE-2024-6875
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk33th percentile - higher than 33% of all known CVEs
Summary
A vulnerability was found in the Infinispan component in Red Hat Data Grid. The REST compare API may have a buffer leak and an out of memory error can occur when sending continual requests with large POST data to the REST API.
Risk Assessment
An attacker can cause memory exhaustion on the server, leading to denial of service (DoS) and potential system instability.
Recommendation
It is recommended to limit the size of data sent in POST requests to the REST API and apply request rate limits. Also apply available security patches from the vendor.
Original NVD description (English source)
A vulnerability was found in the Infinispan component in Red Hat Data Grid. The REST compare API may have a buffer leak and an out of memory error can occur when sending continual requests with large POST data to the REST API.