6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
6.8 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
13.1%
io.vertx:vertx-core is vulnerable to Memory Leak. This vulnerability arises when the Vert.x HTTP client establishes connections to different hosts, leading to the leakage of memory. An attacker with intimate runtime knowledge can exploit this vulnerability, potentially accelerating the memory leak.
CPE | Name | Operator | Version |
---|---|---|---|
vert.x core | le | 4.4.6 | |
vert.x core | le | 4.5.1 | |
vert.x core | le | 4.4.6 | |
vert.x core | le | 4.5.1 |
access.redhat.com/errata/RHSA-2024:1662
access.redhat.com/errata/RHSA-2024:1706
access.redhat.com/errata/RHSA-2024:2088
access.redhat.com/errata/RHSA-2024:2833
access.redhat.com/errata/RHSA-2024:3527
access.redhat.com/errata/RHSA-2024:3989
access.redhat.com/security/cve/CVE-2024-1023
bugzilla.redhat.com/show_bug.cgi?id=2260840
github.com/advisories/GHSA-5667-3wch-7q7w
github.com/eclipse-vertx/vert.x/commit/665ceba38444e3929bb7b9a2a0bae2cb603fe81b
github.com/eclipse-vertx/vert.x/commit/dd6f64302b56cd4d3dcf61efaaf174b5f6ce676d
github.com/eclipse-vertx/vert.x/issues/5078
github.com/eclipse-vertx/vert.x/pull/5080
github.com/eclipse-vertx/vert.x/pull/5082
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
6.8 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
13.1%