CVE-2024-6875

MEDIUM

Red Hat Data Grid - Buffer Overflow

Title source: llm

Description

A vulnerability was found in the Infinispan component in Red Hat Data Grid. The REST compare API may have a buffer leak and an out of memory error can occur when sending continual requests with large POST data to the REST API.

Scores

CVSS v3 6.5
EPSS 0.0031
EPSS Percentile 53.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Classification

CWE
CWE-401
Status draft

Affected Products (1)

org.infinispan/infinispan-query Maven

Timeline

Published Mar 28, 2025
Tracked Since Feb 18, 2026