CVE-2024-1300

Highest-risk unexploited with PoCs

Exploit code exists, no confirmed in-the-wild activity, ranked by EPSS

Actively Exploited

Confirmed exploited in the wild, sorted by most recently updated

CVSS 5.4EPSS 1%

Published 2024-04-02Updated 2025-04-27

Vulnerability details

A vulnerability in the Eclipse Vert.x toolkit causes a memory leak in TCP servers configured with TLS and SNI support. When processing an unknown SNI server name assigned the default certificate instead of a mapped certificate, the SSL context is erroneously cached in the server name map, leading to memory exhaustion. This flaw allows attackers to send TLS client hello messages with fake server names, triggering a JVM out-of-memory error.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L

CNAredhat

EPSS score history

Sources

1 links

PoC links are not available for guest users. Login to view them.

CVE Organization

Profile

CVSS

5.4

EPSS

Published

2024-04-02

Updated

2025-04-27

CNA

redhat

Vendors

Red Hat

24 products

CPEs

cpe:/a:redhat:camel_quarkus:3

cpe:/a:redhat:cryostat:2::el8

cpe:/a:redhat:migration_toolkit_runtimes:1.0::el8

cpe:/a:redhat:migration_toolkit_applications:6.2::el8

cpe:/a:redhat:migration_toolkit_applications:6.2::el9

cpe:/a:redhat:amq_streams:2

cpe:/a:redhat:apache_camel_spring_boot:4.4::el6

cpe:/a:redhat:quarkus:3.2::el8

cpe:/a:redhat:service_registry:2.5

cpe:/a:redhat:a_mq_clients:2

cpe:/a:redhat:serverless:1

cpe:/a:redhat:amq_broker:7

cpe:/a:redhat:camel_spring_boot:3

cpe:/a:redhat:build_keycloak:

cpe:/a:redhat:optaplanner:::el6

cpe:/a:redhat:quarkus:2

cpe:/a:redhat:jboss_data_grid:8

cpe:/a:redhat:jboss_fuse:7

cpe:/a:redhat:integration:1

cpe:/a:redhat:camel_quarkus:2

cpe:/a:redhat:jboss_data_grid:7

cpe:/a:redhat:jboss_enterprise_application_platform:7

cpe:/a:redhat:jboss_enterprise_application_platform:8

cpe:/a:redhat:jbosseapxp

cpe:/a:redhat:jboss_enterprise_bpms_platform:7

cpe:/a:redhat:apache_camel_quarkus:3.2

Vulnerability dashboard

Highest-risk unexploited with PoCs

Actively Exploited

Recently Updated