{"id":"CVE-2024-10270","state":"PUBLISHED","title":"Org.keycloak:keycloak-services: keycloak denial of service","description":"A vulnerability was found in the Keycloak-services package. If untrusted data is passed to the SearchQueryUtils method, it could lead to a denial of service (DoS) scenario by exhausting system resources due to a Regex complexity.","publishedAt":"2024-11-25T07:37:04.542Z","updatedAt":"2026-10-13T18:44:43.584Z","severity":{"score":6.5,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","source":"redhat"},"assigner":"redhat","products":["keycloak","Red Hat Red Hat build of Keycloak 24","Red Hat Red Hat build of Keycloak 24.0.9","Red Hat Red Hat build of Keycloak 26.0","Red Hat Red Hat build of Keycloak 26.0.6","Red Hat Red Hat JBoss Enterprise Application Platform 8","Red Hat Red Hat JBoss Enterprise Application Platform Expansion Pack","Red Hat Red Hat Single Sign-On 7"],"affected":[{"packageName":"keycloak","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"24.0.9","versionType":"semver"},{"version":"25.0.0","status":"affected","lessThan":"26.0.6","versionType":"semver"}],"collectionURL":"https://github.com/keycloak/keycloak"},{"vendor":"Red Hat","product":"Red Hat build of Keycloak 24","packageName":"rhbk/keycloak-operator-bundle","defaultStatus":"affected","versions":[{"version":"24.0.9-1","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:build_keycloak:24::el9"]},{"vendor":"Red Hat","product":"Red Hat build of Keycloak 24","packageName":"rhbk/keycloak-rhel9","defaultStatus":"affected","versions":[{"version":"24-18","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:build_keycloak:24::el9"]},{"vendor":"Red Hat","product":"Red Hat build of Keycloak 24","packageName":"rhbk/keycloak-rhel9-operator","defaultStatus":"affected","versions":[{"version":"24-18","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:build_keycloak:24::el9"]},{"vendor":"Red Hat","product":"Red Hat build of Keycloak 24.0.9","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:build_keycloak:24"]},{"vendor":"Red Hat","product":"Red Hat build of Keycloak 26.0","packageName":"rhbk/keycloak-operator-bundle","defaultStatus":"affected","versions":[{"version":"26.0.6-2","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:build_keycloak:26.0::el9"]},{"vendor":"Red Hat","product":"Red Hat build of Keycloak 26.0","packageName":"rhbk/keycloak-rhel9","defaultStatus":"affected","versions":[{"version":"26.0-5","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:build_keycloak:26.0::el9"]},{"vendor":"Red Hat","product":"Red Hat build of Keycloak 26.0","packageName":"rhbk/keycloak-rhel9-operator","defaultStatus":"affected","versions":[{"version":"26.0-6","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:build_keycloak:26.0::el9"]},{"vendor":"Red Hat","product":"Red Hat build of Keycloak 26.0.6","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:build_keycloak:26.0"]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8","packageName":"keycloak-services","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:8"]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform Expansion Pack","packageName":"keycloak-services","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html","cpes":["cpe:/a:redhat:jbosseapxp"]},{"vendor":"Red Hat","product":"Red Hat Single Sign-On 7","packageName":"keycloak-services","defaultStatus":"unknown","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:red_hat_single_sign_on:7"]}],"references":["https://access.redhat.com/errata/RHSA-2024:10175","https://access.redhat.com/errata/RHSA-2024:10176","https://access.redhat.com/errata/RHSA-2024:10177","https://access.redhat.com/errata/RHSA-2024:10178","https://access.redhat.com/security/cve/CVE-2024-10270","https://bugzilla.redhat.com/show_bug.cgi?id=2321214","https://github.com/advisories/GHSA-wq8x-cg39-8mrr","https://github.com/keycloak/keycloak/commit/5d6c91f3309db468b0fe4834e88c3d25649f73e4"],"weaknesses":["CWE-1333"],"ingestedAt":"2026-10-29T20:06:50.777Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/10xxx/CVE-2024-10270.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2024-10270","state":"PUBLISHED","datePublished":"2024-11-25T07:37:04.542Z","dateUpdated":"2026-10-13T18:44:43.584Z","assignerShortName":"redhat","assignerOrgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","dateReserved":"2024-10-23T02:00:58.671Z"},"containers":{"cna":{"title":"Org.keycloak:keycloak-services: keycloak denial of service","descriptions":[{"lang":"en","value":"A vulnerability was found in the Keycloak-services package. If untrusted data is passed to the SearchQueryUtils method, it could lead to a denial of service (DoS) scenario by exhausting system resources due to a Regex complexity."}],"affected":[{"packageName":"keycloak","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"24.0.9","versionType":"semver"},{"version":"25.0.0","status":"affected","lessThan":"26.0.6","versionType":"semver"}],"collectionURL":"https://github.com/keycloak/keycloak"},{"vendor":"Red Hat","product":"Red Hat build of Keycloak 24","packageName":"rhbk/keycloak-operator-bundle","defaultStatus":"affected","versions":[{"version":"24.0.9-1","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:build_keycloak:24::el9"]},{"vendor":"Red Hat","product":"Red Hat build of Keycloak 24","packageName":"rhbk/keycloak-rhel9","defaultStatus":"affected","versions":[{"version":"24-18","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:build_keycloak:24::el9"]},{"vendor":"Red Hat","product":"Red Hat build of Keycloak 24","packageName":"rhbk/keycloak-rhel9-operator","defaultStatus":"affected","versions":[{"version":"24-18","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:build_keycloak:24::el9"]},{"vendor":"Red Hat","product":"Red Hat build of Keycloak 24.0.9","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:build_keycloak:24"]},{"vendor":"Red Hat","product":"Red Hat build of Keycloak 26.0","packageName":"rhbk/keycloak-operator-bundle","defaultStatus":"affected","versions":[{"version":"26.0.6-2","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:build_keycloak:26.0::el9"]},{"vendor":"Red Hat","product":"Red Hat build of Keycloak 26.0","packageName":"rhbk/keycloak-rhel9","defaultStatus":"affected","versions":[{"version":"26.0-5","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:build_keycloak:26.0::el9"]},{"vendor":"Red Hat","product":"Red Hat build of Keycloak 26.0","packageName":"rhbk/keycloak-rhel9-operator","defaultStatus":"affected","versions":[{"version":"26.0-6","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:build_keycloak:26.0::el9"]},{"vendor":"Red Hat","product":"Red Hat build of Keycloak 26.0.6","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:build_keycloak:26.0"]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform 8","packageName":"keycloak-services","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html","cpes":["cpe:/a:redhat:jboss_enterprise_application_platform:8"]},{"vendor":"Red Hat","product":"Red Hat JBoss Enterprise Application Platform Expansion Pack","packageName":"keycloak-services","defaultStatus":"unaffected","collectionURL":"https://access.redhat.com/jbossnetwork/restricted/listSoftware.html","cpes":["cpe:/a:redhat:jbosseapxp"]},{"vendor":"Red Hat","product":"Red Hat Single Sign-On 7","packageName":"keycloak-services","defaultStatus":"unknown","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:red_hat_single_sign_on:7"]}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2024:10175","name":"RHSA-2024:10175","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2024:10176","name":"RHSA-2024:10176","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2024:10177","name":"RHSA-2024:10177","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2024:10178","name":"RHSA-2024:10178","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-10270","tags":["vdb-entry","x_refsource_REDHAT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2321214","name":"RHBZ#2321214","tags":["issue-tracking","x_refsource_REDHAT"]},{"url":"https://github.com/advisories/GHSA-wq8x-cg39-8mrr"},{"url":"https://github.com/keycloak/keycloak/commit/5d6c91f3309db468b0fe4834e88c3d25649f73e4"}],"metrics":[{"other":{"content":{"value":"Moderate","namespace":"https://access.redhat.com/security/updates/classification/"},"type":"Red Hat severity rating"}},{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"format":"CVSS"}],"problemTypes":[{"descriptions":[{"cweId":"CWE-1333","description":"Inefficient Regular Expression Complexity","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"redhat","orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","dateUpdated":"2026-10-13T18:44:43.584Z"},"datePublic":"2024-11-21T16:54:00.000Z","x_redhatCweChain":"CWE-1333: Inefficient Regular Expression Complexity","workarounds":[{"lang":"en","value":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}],"timeline":[{"lang":"en","time":"2024-10-23T01:51:45.483Z","value":"Reported to Red Hat."},{"lang":"en","time":"2024-11-21T16:54:00.000Z","value":"Made public."}],"x_generator":{"engine":"cvelib 1.8.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2024-10270","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2024-11-25T17:15:02.524794Z"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-11-25T17:15:57.082Z"}}]}}}