Patchwire CVEs, their patch status, and feeds to follow them

CVE-2024-41172

Fixed in a distro release EPSS 1%CVSS 5.3

In versions of Apache CXF before 3.6.4 and 4.0.5 (3.5.x and lower versions are not impacted), a CXF HTTP client conduit may prevent HTTPClient instances from being garbage collected and it is possible that memory consumption will continue to increase, eventually causing the application to run out of memory

Published 2024-07-19 · CVE record · OSV

Products: Apache Software Foundation Apache CXF, Apache CXF

Fixed upstream

EcosystemPackageFixed in
Mavenorg.apache.cxf:cxf-rt-transports-http4.0.5
Mavenorg.apache.cxf:cxf-rt-transports-http3.6.4

Distro releases

ReleasePackageFixed in
Red Hat jboss enterprise application platform 8.0eap8-activemq-artemis0:2.33.0-1.redhat_00015.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-activemq-artemis0:2.33.0-1.redhat_00015.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-activemq-artemis-cli0:2.33.0-1.redhat_00015.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-activemq-artemis-cli0:2.33.0-1.redhat_00015.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-activemq-artemis-commons0:2.33.0-1.redhat_00015.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-activemq-artemis-commons0:2.33.0-1.redhat_00015.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-activemq-artemis-core-client0:2.33.0-1.redhat_00015.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-activemq-artemis-core-client0:2.33.0-1.redhat_00015.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-activemq-artemis-dto0:2.33.0-1.redhat_00015.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-activemq-artemis-dto0:2.33.0-1.redhat_00015.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-activemq-artemis-hornetq-protocol0:2.33.0-1.redhat_00015.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-activemq-artemis-hornetq-protocol0:2.33.0-1.redhat_00015.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-activemq-artemis-hqclient-protocol0:2.33.0-1.redhat_00015.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-activemq-artemis-hqclient-protocol0:2.33.0-1.redhat_00015.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-activemq-artemis-jakarta-client0:2.33.0-1.redhat_00015.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-activemq-artemis-jakarta-client0:2.33.0-1.redhat_00015.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-activemq-artemis-jakarta-ra0:2.33.0-1.redhat_00015.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-activemq-artemis-jakarta-ra0:2.33.0-1.redhat_00015.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-activemq-artemis-jakarta-server0:2.33.0-1.redhat_00015.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-activemq-artemis-jakarta-server0:2.33.0-1.redhat_00015.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-activemq-artemis-jakarta-service-extensions0:2.33.0-1.redhat_00015.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-activemq-artemis-jakarta-service-extensions0:2.33.0-1.redhat_00015.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-activemq-artemis-jdbc-store0:2.33.0-1.redhat_00015.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-activemq-artemis-jdbc-store0:2.33.0-1.redhat_00015.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-activemq-artemis-journal0:2.33.0-1.redhat_00015.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-activemq-artemis-journal0:2.33.0-1.redhat_00015.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-activemq-artemis-native1:2.0.0-2.redhat_00005.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-activemq-artemis-native1:2.0.0-2.redhat_00005.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-activemq-artemis-selector0:2.33.0-1.redhat_00015.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-activemq-artemis-selector0:2.33.0-1.redhat_00015.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-activemq-artemis-server0:2.33.0-1.redhat_00015.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-activemq-artemis-server0:2.33.0-1.redhat_00015.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-aesh-extensions0:1.8.0-2.redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-aesh-extensions0:1.8.0-2.redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-aesh-readline0:2.2.0-2.redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-aesh-readline0:2.2.0-2.redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-apache-commons-codec0:1.16.1-2.redhat_00007.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-apache-commons-codec0:1.16.1-2.redhat_00007.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-apache-commons-collections0:3.2.2-28.redhat_2.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-apache-commons-collections0:3.2.2-28.redhat_2.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-apache-commons-io0:2.15.1-1.redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-apache-commons-io0:2.15.1-1.redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-apache-commons-lang0:3.14.0-2.redhat_00006.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-apache-commons-lang0:3.14.0-2.redhat_00006.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-apache-cxf0:4.0.5-1.redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-apache-cxf0:4.0.5-1.redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-apache-cxf-rt0:4.0.5-1.redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-apache-cxf-rt0:4.0.5-1.redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-apache-cxf-services0:4.0.5-1.redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-apache-cxf-services0:4.0.5-1.redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-apache-cxf-tools0:4.0.5-1.redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-apache-cxf-tools0:4.0.5-1.redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-artemis-native1:2.0.0-2.redhat_00005.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-artemis-native1:2.0.0-2.redhat_00005.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-artemis-native-wildfly1:2.0.0-2.redhat_00005.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-artemis-native-wildfly1:2.0.0-2.redhat_00005.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-artemis-wildfly-integration0:2.0.1-1.redhat_00002.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-artemis-wildfly-integration0:2.0.1-1.redhat_00002.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-asyncutil0:0.1.0-2.redhat_00010.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-asyncutil0:0.1.0-2.redhat_00010.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-aws-java-sdk0:1.12.284-2.redhat_00002.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-aws-java-sdk0:1.12.284-2.redhat_00002.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-aws-java-sdk-core0:1.12.284-2.redhat_00002.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-aws-java-sdk-core0:1.12.284-2.redhat_00002.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-aws-java-sdk-kms0:1.12.284-2.redhat_00002.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-aws-java-sdk-kms0:1.12.284-2.redhat_00002.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-aws-java-sdk-s30:1.12.284-2.redhat_00002.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-aws-java-sdk-s30:1.12.284-2.redhat_00002.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-cryptacular0:1.2.5-2.redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-cryptacular0:1.2.5-2.redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-eap-product-conf-parent0:800.4.0-1.GA_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-eap-product-conf-parent0:800.4.0-1.GA_redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-eap-product-conf-wildfly-ee-feature-pack0:800.4.0-1.GA_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-eap-product-conf-wildfly-ee-feature-pack0:800.4.0-1.GA_redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-fastinfoset0:2.1.0-4.redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-fastinfoset0:2.1.0-4.redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-hibernate0:6.2.31-1.Final_redhat_00002.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-hibernate0:6.2.31-1.Final_redhat_00002.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-hibernate-core0:6.2.31-1.Final_redhat_00002.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-hibernate-core0:6.2.31-1.Final_redhat_00002.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-hibernate-envers0:6.2.31-1.Final_redhat_00002.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-hibernate-envers0:6.2.31-1.Final_redhat_00002.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-hibernate-validator0:8.0.1-3.Final_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-hibernate-validator0:8.0.1-3.Final_redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-hibernate-validator-cdi0:8.0.1-3.Final_redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-hibernate-validator-cdi0:8.0.1-3.Final_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-hppc0:0.8.1-2.redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-hppc0:0.8.1-2.redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-insights-java-client0:1.1.3-1.redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-insights-java-client0:1.1.3-1.redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-jakarta-servlet-jsp-jstl0:3.0.1-1.redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-jakarta-servlet-jsp-jstl0:3.0.1-1.redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-jakarta-servlet-jsp-jstl-api0:3.0.1-1.redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-jakarta-servlet-jsp-jstl-api0:3.0.1-1.redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-jboss-cert-helper0:1.1.3-1.redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-jboss-cert-helper0:1.1.3-1.redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-jboss-logging0:3.5.3-1.Final_redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-jboss-logging0:3.5.3-1.Final_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-jctools0:4.0.2-1.redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-jctools0:4.0.2-1.redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-jctools-core0:4.0.2-1.redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-jctools-core0:4.0.2-1.redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-jgroups0:5.3.10-1.Final_redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-jgroups0:5.3.10-1.Final_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-jmespath-java0:1.12.284-2.redhat_00002.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-jmespath-java0:1.12.284-2.redhat_00002.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-log4j0:2.22.1-1.redhat_00002.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-log4j0:2.22.1-1.redhat_00002.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-narayana0:6.0.3-1.Final_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-narayana0:6.0.3-1.Final_redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-narayana-jbosstxbridge0:6.0.3-1.Final_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-narayana-jbosstxbridge0:6.0.3-1.Final_redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-narayana-jbossxts0:6.0.3-1.Final_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-narayana-jbossxts0:6.0.3-1.Final_redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-narayana-jts-idlj0:6.0.3-1.Final_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-narayana-jts-idlj0:6.0.3-1.Final_redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-narayana-jts-integration0:6.0.3-1.Final_redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-narayana-jts-integration0:6.0.3-1.Final_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-narayana-restat-api0:6.0.3-1.Final_redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-narayana-restat-api0:6.0.3-1.Final_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-narayana-restat-bridge0:6.0.3-1.Final_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-narayana-restat-bridge0:6.0.3-1.Final_redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-narayana-restat-integration0:6.0.3-1.Final_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-narayana-restat-integration0:6.0.3-1.Final_redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-narayana-restat-util0:6.0.3-1.Final_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-narayana-restat-util0:6.0.3-1.Final_redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-nimbus-jose-jwt0:9.37.3-1.redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-nimbus-jose-jwt0:9.37.3-1.redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-objectweb-asm0:9.6.0-1.redhat_00002.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-objectweb-asm0:9.6.0-1.redhat_00002.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-objectweb-asm-util0:9.6.0-1.redhat_00002.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-objectweb-asm-util0:9.6.0-1.redhat_00002.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-pem-keystore0:2.3.0-1.redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-pem-keystore0:2.3.0-1.redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-resteasy-extensions0:2.0.1-3.Final_redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-resteasy-extensions0:2.0.1-3.Final_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-resteasy-spring0:3.0.1-2.Final_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-resteasy-spring0:3.0.1-2.Final_redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-resteasy-tracing-api0:2.0.1-3.Final_redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-resteasy-tracing-api0:2.0.1-3.Final_redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-saaj-impl0:3.0.4-1.redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-saaj-impl0:3.0.4-1.redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-shibboleth-java-support0:8.0.0-6.redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-shibboleth-java-support0:8.0.0-6.redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-slf4j0:2.0.16-1.redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-slf4j0:2.0.16-1.redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-slf4j-api0:2.0.16-1.redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-slf4j-api0:2.0.16-1.redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-snakeyaml0:2.2.0-1.redhat_00001.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-snakeyaml0:2.2.0-1.redhat_00001.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-wildfly0:8.0.4-2.GA_redhat_00005.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-wildfly0:8.0.4-2.GA_redhat_00005.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-wildfly-java-jdk110:8.0.4-2.GA_redhat_00005.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-wildfly-java-jdk110:8.0.4-2.GA_redhat_00005.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-wildfly-java-jdk170:8.0.4-2.GA_redhat_00005.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-wildfly-java-jdk170:8.0.4-2.GA_redhat_00005.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-wildfly-java-jdk210:8.0.4-2.GA_redhat_00005.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-wildfly-java-jdk210:8.0.4-2.GA_redhat_00005.1.el9eap
Red Hat jboss enterprise application platform 8.0eap8-wildfly-modules0:8.0.4-2.GA_redhat_00005.1.el8eap
Red Hat jboss enterprise application platform 8.0eap8-wildfly-modules0:8.0.4-2.GA_redhat_00005.1.el9eap