Record status Published
Identifier year (not publication year) 2024
Source publication Jan 2, 2025
Source updated Sep 7, 2026
Imported by cveboard Oct 24, 2026
CNA source text (English) Narayana: deadlock via multiple join requests sent to lra coordinator
A security issue was discovered in the LRA Coordinator component of Narayana. When Cancel is called in LRA, an execution time of approximately 2 seconds occurs. If Join is called with the same LRA ID within that timeframe, the application may crash or hang indefinitely, leading to a denial of service.
Scoped product and version facts Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
narayana
Vendor Unknown
Product Unknown
Platforms Unknown
Default status unaffected
Package narayana
Package collection https://github.com/jbosstm/narayana/
narayana · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0 affectedsemver 7.1.0.Final Unavailable None listed
Red Hat JBoss EAP XP 5.0 Update 2.0
Vendor Red Hat
Product Red Hat JBoss EAP XP 5.0 Update 2.0
Platforms Unknown
Default status unaffected
Package org.jboss.narayana-narayana-all
Package collection https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat JBoss Enterprise Application Platform 8
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 8
Platforms Unknown
Default status unaffected
Package org.jboss.narayana-narayana-all
Package collection https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
Platforms Unknown
Default status affected
Package eap8-eap-product-conf-parent
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:800.6.1-1.GA_redhat_00001.1.el8eap unaffectedrpm * Unavailable None listed
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
Platforms Unknown
Default status affected
Package eap8-netty
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:4.1.119-1.Final_redhat_00002.1.el8eap unaffectedrpm * Unavailable None listed
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
Platforms Unknown
Default status affected
Package eap8-netty-transport-native-epoll
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:4.1.119-1.Final_redhat_00002.1.el8eap unaffectedrpm * Unavailable None listed
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
Platforms Unknown
Default status affected
Package eap8-slf4j
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:2.0.16-2.redhat_00003.1.el8eap unaffectedrpm * Unavailable None listed
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
Platforms Unknown
Default status affected
Package eap8-wildfly
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:8.0.6-15.GA_redhat_00009.1.el8eap unaffectedrpm * Unavailable None listed
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
Platforms Unknown
Default status affected
Package eap8-eap-product-conf-parent
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:800.6.1-1.GA_redhat_00001.1.el9eap unaffectedrpm * Unavailable None listed
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
Platforms Unknown
Default status affected
Package eap8-netty
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:4.1.119-1.Final_redhat_00002.1.el9eap unaffectedrpm * Unavailable None listed
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
Platforms Unknown
Default status affected
Package eap8-netty-transport-native-epoll
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:4.1.119-1.Final_redhat_00002.1.el9eap unaffectedrpm * Unavailable None listed
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
Platforms Unknown
Default status affected
Package eap8-slf4j
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:2.0.16-2.redhat_00003.1.el9eap unaffectedrpm * Unavailable None listed
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
Platforms Unknown
Default status affected
Package eap8-wildfly
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:8.0.6-15.GA_redhat_00009.1.el9eap unaffectedrpm * Unavailable None listed
Red Hat JBoss Data Grid 7
Vendor Red Hat
Product Red Hat JBoss Data Grid 7
Platforms Unknown
Default status affected
Package org.jboss.narayana-narayana-all
Package collection https://access.redhat.com/jbossnetwork/restricted/listSoftware.html
No explicit version tuples; consult this entry's default status.
Red Hat JBoss Enterprise Application Platform 7
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Platforms Unknown
Default status unknown
Package org.jboss.narayana-narayana-all
Package collection https://access.redhat.com/jbossnetwork/restricted/listSoftware.html
No explicit version tuples; consult this entry's default status.
Red Hat JBoss Enterprise Application Platform Expansion Pack
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform Expansion Pack
Platforms Unknown
Default status affected
Package org.jboss.narayana-narayana-all
Package collection https://access.redhat.com/jbossnetwork/restricted/listSoftware.html
No explicit version tuples; consult this entry's default status.