CVE-2024-1300

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2024
Source publication: Apr 2, 2024
Source updated: Sep 23, 2026
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

Io.vertx:vertx-core: memory leak when a tcp server is configured with tls and sni support

A vulnerability in the Eclipse Vert.x toolkit causes a memory leak in TCP servers configured with TLS and SNI support. When processing an unknown SNI server name assigned the default certificate instead of a mapped certificate, the SSL context is erroneously cached in the server name map, leading to memory exhaustion. This flaw allows attackers to send TLS client hello messages with fake server names, triggering a JVM out-of-memory error.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

io.vertx:vertx-core

Vendor: Unknown
Product: Unknown
Platforms: Unknown
Default status: unaffected
Package: io.vertx:vertx-core
Package collection: https://vertx.io/docs/vertx-core/java/

io.vertx:vertx-core · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
4.3.4	`affected`	semver	Unavailable	4.5.2	None listed

CEQ 3.2

Vendor: Red Hat
Product: CEQ 3.2
Platforms: Unknown
Default status: unaffected
Package: vertx-core
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Cryostat 2 on RHEL 8

Vendor: Red Hat
Product: Cryostat 2 on RHEL 8
Platforms: Unknown
Default status: affected
Package: cryostat-tech-preview/cryostat-grafana-dashboard-rhel8
Package collection: https://catalog.redhat.com/software/containers/

Cryostat 2 on RHEL 8 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
2.4.0-7	`unaffected`	rpm	*	Unavailable	None listed

Cryostat 2 on RHEL 8

Vendor: Red Hat
Product: Cryostat 2 on RHEL 8
Platforms: Unknown
Default status: affected
Package: cryostat-tech-preview/cryostat-operator-bundle
Package collection: https://catalog.redhat.com/software/containers/

Cryostat 2 on RHEL 8 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
2.4.0-4	`unaffected`	rpm	*	Unavailable	None listed

Cryostat 2 on RHEL 8

Vendor: Red Hat
Product: Cryostat 2 on RHEL 8
Platforms: Unknown
Default status: affected
Package: cryostat-tech-preview/cryostat-reports-rhel8
Package collection: https://catalog.redhat.com/software/containers/

Cryostat 2 on RHEL 8 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
2.4.0-4	`unaffected`	rpm	*	Unavailable	None listed

Cryostat 2 on RHEL 8

Vendor: Red Hat
Product: Cryostat 2 on RHEL 8
Platforms: Unknown
Default status: affected
Package: cryostat-tech-preview/cryostat-rhel8
Package collection: https://catalog.redhat.com/software/containers/

Cryostat 2 on RHEL 8 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
2.4.0-4	`unaffected`	rpm	*	Unavailable	None listed

Cryostat 2 on RHEL 8

Vendor: Red Hat
Product: Cryostat 2 on RHEL 8
Platforms: Unknown
Default status: affected
Package: cryostat-tech-preview/cryostat-rhel8-operator
Package collection: https://catalog.redhat.com/software/containers/

Cryostat 2 on RHEL 8 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
2.4.0-9	`unaffected`	rpm	*	Unavailable	None listed

Cryostat 2 on RHEL 8

Vendor: Red Hat
Product: Cryostat 2 on RHEL 8
Platforms: Unknown
Default status: affected
Package: cryostat-tech-preview/jfr-datasource-rhel8
Package collection: https://catalog.redhat.com/software/containers/

Cryostat 2 on RHEL 8 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
2.4.0-4	`unaffected`	rpm	*	Unavailable	None listed

Migration Toolkit for Runtimes 1 on RHEL 8

Vendor: Red Hat
Product: Migration Toolkit for Runtimes 1 on RHEL 8
Platforms: Unknown
Default status: affected
Package: mtr/mtr-operator-bundle
Package collection: https://catalog.redhat.com/software/containers/

Migration Toolkit for Runtimes 1 on RHEL 8 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.2-18	`unaffected`	rpm	*	Unavailable	None listed

Migration Toolkit for Runtimes 1 on RHEL 8

Vendor: Red Hat
Product: Migration Toolkit for Runtimes 1 on RHEL 8
Platforms: Unknown
Default status: affected
Package: mtr/mtr-rhel8-operator
Package collection: https://catalog.redhat.com/software/containers/

Migration Toolkit for Runtimes 1 on RHEL 8 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.2-11	`unaffected`	rpm	*	Unavailable	None listed

Migration Toolkit for Runtimes 1 on RHEL 8

Vendor: Red Hat
Product: Migration Toolkit for Runtimes 1 on RHEL 8
Platforms: Unknown
Default status: affected
Package: mtr/mtr-web-container-rhel8
Package collection: https://catalog.redhat.com/software/containers/

Migration Toolkit for Runtimes 1 on RHEL 8 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.2-12	`unaffected`	rpm	*	Unavailable	None listed

Migration Toolkit for Runtimes 1 on RHEL 8

Vendor: Red Hat
Product: Migration Toolkit for Runtimes 1 on RHEL 8
Platforms: Unknown
Default status: affected
Package: mtr/mtr-web-executor-container-rhel8
Package collection: https://catalog.redhat.com/software/containers/

Migration Toolkit for Runtimes 1 on RHEL 8 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1.2-10	`unaffected`	rpm	*	Unavailable	None listed

MTA-6.2-RHEL-9

Vendor: Red Hat
Product: MTA-6.2-RHEL-9
Platforms: Unknown
Default status: affected
Package: mta/mta-windup-addon-rhel9
Package collection: https://catalog.redhat.com/software/containers/

MTA-6.2-RHEL-9 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
6.2.3-2	`unaffected`	rpm	*	Unavailable	None listed

Red Hat AMQ Streams 2.7.0

Vendor: Red Hat
Product: Red Hat AMQ Streams 2.7.0
Platforms: Unknown
Default status: unaffected
Package: vertx-core
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat build of Apache Camel 4.4.1 for Spring Boot 3.2

Vendor: Red Hat
Product: Red Hat build of Apache Camel 4.4.1 for Spring Boot 3.2
Platforms: Unknown
Default status: unaffected
Package: vertx-core
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat build of Quarkus 3.2.11.Final

Vendor: Red Hat
Product: Red Hat build of Quarkus 3.2.11.Final
Platforms: Unknown
Default status: affected
Package: io.vertx/vertx-core
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat build of Quarkus 3.2.11.Final · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
4.4.8.redhat-00001	`unaffected`	rpm	*	Unavailable	None listed

RHINT Service Registry 2.5.11 GA

Vendor: Red Hat
Product: RHINT Service Registry 2.5.11 GA
Platforms: Unknown
Default status: unaffected
Package: vertx-core
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

A-MQ Clients 2

Vendor: Red Hat
Product: A-MQ Clients 2
Platforms: Unknown
Default status: unaffected
Package: vertx-core
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

OpenShift Serverless

Vendor: Red Hat
Product: OpenShift Serverless
Platforms: Unknown
Default status: unaffected
Package: vertx-core
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat AMQ Broker 7

Vendor: Red Hat
Product: Red Hat AMQ Broker 7
Platforms: Unknown
Default status: unaffected
Package: vertx-core
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat build of Apache Camel 4 for Quarkus 3

Vendor: Red Hat
Product: Red Hat build of Apache Camel 4 for Quarkus 3
Platforms: Unknown
Default status: affected
Package: vertx-core
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat build of Apache Camel for Spring Boot 3

Vendor: Red Hat
Product: Red Hat build of Apache Camel for Spring Boot 3
Platforms: Unknown
Default status: affected
Package: vertx-core
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat Build of Keycloak

Vendor: Red Hat
Product: Red Hat Build of Keycloak
Platforms: Unknown
Default status: affected
Package: vertx-core
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat build of OptaPlanner 8

Vendor: Red Hat
Product: Red Hat build of OptaPlanner 8
Platforms: Unknown
Default status: affected
Package: vertx-core
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat build of Quarkus

Vendor: Red Hat
Product: Red Hat build of Quarkus
Platforms: Unknown
Default status: affected
Package: vertx-core
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat Data Grid 8

Vendor: Red Hat
Product: Red Hat Data Grid 8
Platforms: Unknown
Default status: unaffected
Package: vertx-core
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat Fuse 7

Vendor: Red Hat
Product: Red Hat Fuse 7
Platforms: Unknown
Default status: unaffected
Package: vertx-core
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat Integration Camel K 1

Vendor: Red Hat
Product: Red Hat Integration Camel K 1
Platforms: Unknown
Default status: affected
Package: vertx-core
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat Integration Camel Quarkus 2

Vendor: Red Hat
Product: Red Hat Integration Camel Quarkus 2
Platforms: Unknown
Default status: affected
Package: vertx-core
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat JBoss Data Grid 7

Vendor: Red Hat
Product: Red Hat JBoss Data Grid 7
Platforms: Unknown
Default status: affected
Package: vertx-core
Package collection: https://access.redhat.com/jbossnetwork/restricted/listSoftware.html

No explicit version tuples; consult this entry's default status.

Red Hat JBoss Enterprise Application Platform 7

Vendor: Red Hat
Product: Red Hat JBoss Enterprise Application Platform 7
Platforms: Unknown
Default status: unaffected
Package: vertx-core
Package collection: https://access.redhat.com/jbossnetwork/restricted/listSoftware.html

No explicit version tuples; consult this entry's default status.

Red Hat JBoss Enterprise Application Platform 8

Vendor: Red Hat
Product: Red Hat JBoss Enterprise Application Platform 8
Platforms: Unknown
Default status: unaffected
Package: vertx-core
Package collection: https://access.redhat.com/jbossnetwork/restricted/listSoftware.html

No explicit version tuples; consult this entry's default status.

Red Hat JBoss Enterprise Application Platform Expansion Pack

Vendor: Red Hat
Product: Red Hat JBoss Enterprise Application Platform Expansion Pack
Platforms: Unknown
Default status: unaffected
Package: vertx-core
Package collection: https://access.redhat.com/jbossnetwork/restricted/listSoftware.html

No explicit version tuples; consult this entry's default status.

Red Hat Process Automation 7

Vendor: Red Hat
Product: Red Hat Process Automation 7
Platforms: Unknown
Default status: affected
Package: vertx-core
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.