CVE-2024-1300

Io.vertx:vertx-core: memory leak when a tcp server is configured with tls and sni support

Severity Score

5.4

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

Track

*SSVC

Descriptions

A vulnerability in the Eclipse Vert.x toolkit causes a memory leak in TCP servers configured with TLS and SNI support. When processing an unknown SNI server name assigned the default certificate instead of a mapped certificate, the SSL context is erroneously cached in the server name map, leading to memory exhaustion. This flaw allows attackers to send TLS client hello messages with fake server names, triggering a JVM out-of-memory error.

Una vulnerabilidad en Eclipse Vert.x toolkit provoca una pérdida de memoria en servidores TCP configurados con soporte TLS y SNI. Al procesar un nombre de servidor SNI desconocido al que se le asigna el certificado predeterminado en lugar de un certificado asignado, el contexto SSL se almacena en caché por error en el mapa de nombres del servidor, lo que provoca que se agote la memoria. Esta falla permite a los atacantes enviar mensajes de saludo al cliente TLS con nombres de servidor falsos, lo que provoca un error de falta de memoria de JVM.

*Credits: N/A

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

Low

Attack Vector

Network

Attack Complexity

Low

Authentication

Single

Confidentiality

Partial

Integrity

None

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:Track

Exploitation

None

Automatable

Tech. Impact

Partial

* Organization's Worst-case Scenario

Timeline

2024-02-07 CVE Reserved
2024-04-02 CVE Published
2024-04-19 EPSS Updated
2024-11-25 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-400: Uncontrolled Resource Consumption
CWE-401: Missing Release of Memory after Effective Lifetime

CAPEC

References (11)

URL	Tag	Source
https://vertx.io/docs/vertx-core/java/#_server_name_indication_sni.

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
https://access.redhat.com/errata/RHSA-2024:1662	2024-06-20
https://access.redhat.com/errata/RHSA-2024:1706	2024-06-20
https://access.redhat.com/errata/RHSA-2024:1923	2024-06-20
https://access.redhat.com/errata/RHSA-2024:2088	2024-06-20
https://access.redhat.com/errata/RHSA-2024:2833	2024-06-20
https://access.redhat.com/errata/RHSA-2024:3527	2024-06-20
https://access.redhat.com/errata/RHSA-2024:3989	2024-06-20
https://access.redhat.com/security/cve/CVE-2024-1300	2024-06-20
https://bugzilla.redhat.com/show_bug.cgi?id=2263139	2024-06-20
https://access.redhat.com/errata/RHSA-2024:4884	2024-11-25

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Redhat Search vendor "Redhat"		A Mq Clients Search vendor "Redhat" for product "A Mq Clients"				*		-		Affected
Redhat Search vendor "Redhat"		Amq Search vendor "Redhat" for product "Amq"				*		-		Affected
Redhat Search vendor "Redhat"		Amq Broker Search vendor "Redhat" for product "Amq Broker"				*		-		Affected
Redhat Search vendor "Redhat"		Amq Streams Search vendor "Redhat" for product "Amq Streams"				*		-		Affected
Redhat Search vendor "Redhat"		Apache Camel Spring Boot Search vendor "Redhat" for product "Apache Camel Spring Boot"				*		-		Affected
Redhat Search vendor "Redhat"		Build Keycloak Search vendor "Redhat" for product "Build Keycloak"				*		-		Affected
Redhat Search vendor "Redhat"		Build Of Keycloak Search vendor "Redhat" for product "Build Of Keycloak"				*		-		Affected
Redhat Search vendor "Redhat"		Build Of Optaplanner Search vendor "Redhat" for product "Build Of Optaplanner"				*		-		Affected
Redhat Search vendor "Redhat"		Build Of Quarkus Search vendor "Redhat" for product "Build Of Quarkus"				*		-		Affected
Redhat Search vendor "Redhat"		Camel Quarkus Search vendor "Redhat" for product "Camel Quarkus"				*		-		Affected
Redhat Search vendor "Redhat"		Camel Spring Boot Search vendor "Redhat" for product "Camel Spring Boot"				*		-		Affected
Redhat Search vendor "Redhat"		Cryostat Search vendor "Redhat" for product "Cryostat"				*		-		Affected
Redhat Search vendor "Redhat"		Data Grid Search vendor "Redhat" for product "Data Grid"				*		-		Affected
Redhat Search vendor "Redhat"		Integration Search vendor "Redhat" for product "Integration"				*		-		Affected
Redhat Search vendor "Redhat"		Integration Camel K Search vendor "Redhat" for product "Integration Camel K"				*		-		Affected
Redhat Search vendor "Redhat"		Integration Camel Quarkus Search vendor "Redhat" for product "Integration Camel Quarkus"				*		-		Affected
Redhat Search vendor "Redhat"		Jboss Data Grid Search vendor "Redhat" for product "Jboss Data Grid"				*		-		Affected
Redhat Search vendor "Redhat"		Jboss Enterprise Application Platform Search vendor "Redhat" for product "Jboss Enterprise Application Platform"				*		-		Affected
Redhat Search vendor "Redhat"		Jboss Enterprise Bpms Platform Search vendor "Redhat" for product "Jboss Enterprise Bpms Platform"				*		-		Affected
Redhat Search vendor "Redhat"		Jboss Fuse Search vendor "Redhat" for product "Jboss Fuse"				*		-		Affected
Redhat Search vendor "Redhat"		Jbosseapxp Search vendor "Redhat" for product "Jbosseapxp"				*		-		Affected
Redhat Search vendor "Redhat"		Migration Toolkit Search vendor "Redhat" for product "Migration Toolkit"				*		-		Affected
Redhat Search vendor "Redhat"		Migration Toolkit Applications Search vendor "Redhat" for product "Migration Toolkit Applications"				*		-		Affected
Redhat Search vendor "Redhat"		Migration Toolkit Runtimes Search vendor "Redhat" for product "Migration Toolkit Runtimes"				*		-		Affected
Redhat Search vendor "Redhat"		Openshift Search vendor "Redhat" for product "Openshift"				*		-		Affected
Redhat Search vendor "Redhat"		Optaplanner Search vendor "Redhat" for product "Optaplanner"				*		-		Affected
Redhat Search vendor "Redhat"		Process Automation Search vendor "Redhat" for product "Process Automation"				*		-		Affected
Redhat Search vendor "Redhat"		Quarkus Search vendor "Redhat" for product "Quarkus"				*		-		Affected
Redhat Search vendor "Redhat"		Serverless Search vendor "Redhat" for product "Serverless"				*		-		Affected
Redhat Search vendor "Redhat"		Service Registry Search vendor "Redhat" for product "Service Registry"				*		-		Affected
Redhat Search vendor "Redhat"		Enterprise Linux Search vendor "Redhat" for product "Enterprise Linux"				*		-		Affected