Skip to content
CVE PROGRAM SOURCE RECORD5.9 Medium

CVE-2024-8447

Narayana: deadlock via multiple join requests sent to lra coordinator

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
redhat

Description

A security issue was discovered in the LRA Coordinator component of Narayana. When Cancel is called in LRA, an execution time of approximately 2 seconds occurs. If Join is called with the same LRA ID within that timeframe, the application may crash or hang indefinitely, leading to a denial of service.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

narayana

Default version status: unaffected

  • 0 to < 7.1.0.Finalaffected

Red Hat Red Hat JBoss EAP XP 5.0 Update 2.0

Default version status: unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 8

Default version status: unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8

Default version status: affected

  • 0:800.6.1-1.GA_redhat_00001.1.el8eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8

Default version status: affected

  • 0:4.1.119-1.Final_redhat_00002.1.el8eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8

Default version status: affected

  • 0:4.1.119-1.Final_redhat_00002.1.el8eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8

Default version status: affected

  • 0:2.0.16-2.redhat_00003.1.el8eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8

Default version status: affected

  • 0:8.0.6-15.GA_redhat_00009.1.el8eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9

Default version status: affected

  • 0:800.6.1-1.GA_redhat_00001.1.el9eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9

Default version status: affected

  • 0:4.1.119-1.Final_redhat_00002.1.el9eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9

Default version status: affected

  • 0:4.1.119-1.Final_redhat_00002.1.el9eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9

Default version status: affected

  • 0:2.0.16-2.redhat_00003.1.el9eap to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9

Default version status: affected

  • 0:8.0.6-15.GA_redhat_00009.1.el9eap to < *unaffected

Red Hat Red Hat JBoss Data Grid 7

Default version status: affected

Red Hat Red Hat JBoss Enterprise Application Platform 7

Default version status: unknown

Red Hat Red Hat JBoss Enterprise Application Platform Expansion Pack

Default version status: affected

References