CVE-2024-1023

MEDIUM Year: 2024
CVSS v3 Score
6.5
Medium
Weakness Type
CWE-401
View all →

Vulnerability Description

A vulnerability in the Eclipse Vert.x toolkit results in a memory leak due to using Netty FastThreadLocal data structures. Specifically, when the Vert.x HTTP client establishes connections to different hosts, triggering the memory leak. The leak can be accelerated with intimate runtime knowledge, allowing an attacker to exploit this vulnerability. For instance, a server accepting arbitrary internet addresses could serve as an attack vector by connecting to these addresses, thereby accelerating the memory leak.

Related Vulnerabilities

CVE-2010-2249

MEDIUM
CVSS:6.5(Medium)

Memory leak in pngrutil.c in libpng before 1.2.44, and 1.4.x before 1.4.3, allows remote attackers to cause a denial of service (memory consumption and application crash) via a PNG image containing ma...

CWE-4012010

CVE-2016-9913

MEDIUM
CVSS:6.5(Medium)

Memory leak in the v9fs_device_unrealize_common function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local privileged guest OS users to cause a denial of service (host memory consumption and p...

CWE-4012016

CVE-2016-9914

MEDIUM
CVSS:6.5(Medium)

Memory leak in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local privileged guest OS users to cause a denial of service (host memory consumption and possibly QEMU process crash) by leveraging a m...

CWE-4012016

CVE-2016-9915

MEDIUM
CVSS:6.5(Medium)

Memory leak in hw/9pfs/9p-handle.c in QEMU (aka Quick Emulator) allows local privileged guest OS users to cause a denial of service (host memory consumption and possibly QEMU process crash) by leverag...

CWE-4012016

CVE-2016-9916

MEDIUM
CVSS:6.5(Medium)

Memory leak in hw/9pfs/9p-proxy.c in QEMU (aka Quick Emulator) allows local privileged guest OS users to cause a denial of service (host memory consumption and possibly QEMU process crash) by leveragi...

CWE-4012016

CVE-2017-5525

MEDIUM
CVSS:6.5(Medium)

Memory leak in hw/audio/ac97.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption and QEMU process crash) via a large number of d...

CWE-4012017