Description
A flaw was found in quarkus-websockets-next. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by streaming messages over a single connection faster than the application can process them. Due to unbounded message buffering and a lack of read backpressure, this rapidly exhausts heap space, leading to a java.lang.OutOfMemoryError that crashes the Java Virtual Machine (JVM).
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Red Hat Red Hat build of Quarkus 3.27.5.SP2
Default version status: unaffected
Red Hat Red Hat build of Quarkus 3.33.3.SP2
Default version status: unaffected
Red Hat Exploit Intelligence
Default version status: affected
Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3
Default version status: affected
Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3
Default version status: affected
Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3
Default version status: affected
Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3
Default version status: affected