CVE-2025-2240highCWE-1325

CVE-2025-2240: falha de alta gravidade em smallrye-fault-tolerance-core

Smallrye-fault-tolerance: smallrye fault tolerance

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Red Hat JBoss Enterprise Application Platform Expansion Pack+ Monitorar Red Hat JBoss Enterprise Application Platform

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.5epss 1.2%
A flaw was found in Smallrye, where smallrye-fault-tolerance is vulnerable to an out-of-memory (OOM) issue. This vulnerability is externally triggered when calling the metrics URI. Every call creates a new object within meterMap and may lead to a denial of service (DoS) issue.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Produtos afetados
smallrye-fault-tolerance-coreRed Hat · Red Hat build of Apache Camel 4.8.5 for Spring BootRed Hat · Red Hat Build of Apache Camel 4.8 for Quarkus 3.15Red Hat · Red Hat build of Apicurio Registry 2Red Hat · Red Hat build of Apicurio Registry 3Red Hat · Red Hat build of QuarkusRed Hat · Red Hat build of Quarkus 3.15.4Red Hat · Red Hat Fuse 7Red Hat · Red Hat Integration Camel K 1Red Hat · Red Hat JBoss Enterprise Application Platform 7Red Hat · Red Hat JBoss Enterprise Application Platform 8Red Hat · Red Hat JBoss Enterprise Application Platform Expansion Pack
CVEs relacionadas — smallrye-fault-tolerance-core

No mesmo produto, das mais perigosas para as menos.

CVE-2025-1634HIGHIo.quarkus:quarkus-resteasy: memory leak in quarkus resteasy classic when client requests timeoutEPSS 1.0%CVE-2025-1247HIGHIo.quarkus:quarkus-rest: quarkus rest endpoint request parameter leakage due to shared instanceEPSS 0.8%