Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2025-14969

Hibernate-reactive-core: hibernate reactive: denial of service due to connection leak on http client disconnect

Description

A flaw was found in Hibernate Reactive. When an HTTP endpoint is exposed to perform database operations, a remote client can prematurely close the HTTP connection. This action may lead to leaking connections from the database connection pool, potentially causing a Denial of Service (DoS) by exhausting available database connections.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Red Hat Red Hat build of Quarkus 3.27.2.redhat

Default version status: affected

  • 3.1.12.Final-redhat-00001 to < *unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 8

Default version status: unaffected

Red Hat Red Hat JBoss Enterprise Application Platform 8

Default version status: unaffected

Red Hat Red Hat JBoss Enterprise Application Platform Expansion Pack

Default version status: unaffected

Red Hat Red Hat JBoss Enterprise Application Platform Expansion Pack

Default version status: unaffected

Red Hat Red Hat OpenShift Dev Spaces

Default version status: unaffected

Red Hat Red Hat OpenShift Dev Spaces

Default version status: unaffected

References