REDHAT-BUG-2298829: Medium severity Apache CXF vulnerability
In versions of Apache CXF before 3.6.4 and 4.0.5 (3.5.x and lower versions are not impacted), a CXF HTTP client conduit may prevent HTTPClient instances from being garbage collected and it is possible that memory consumption will continue to increase, eventually causing the application to run out of memory
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Apache CXF HTTP client conduitto a version that resolves this vulnerability.Fixed in 3.6.4 - Upgrade
Upgrade
Apache CXF HTTP client conduitto a version that resolves this vulnerability.Fixed in 4.0.5
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2298829?
The severity of REDHAT-BUG-2298829 is considered to be high due to potential memory leaks leading to application crashes.
How do I fix REDHAT-BUG-2298829?
To fix REDHAT-BUG-2298829, upgrade Apache CXF to version 3.6.4 or higher, or 4.0.5 or higher.
Which versions of Apache CXF are affected by REDHAT-BUG-2298829?
Versions of Apache CXF before 3.6.4 and 4.0.5 are affected by REDHAT-BUG-2298829.
What are the consequences of ignoring REDHAT-BUG-2298829?
Ignoring REDHAT-BUG-2298829 may lead to increased memory consumption and eventually cause the application to run out of memory.
Is REDHAT-BUG-2298829 specific to any operating system?
REDHAT-BUG-2298829 is specific to the Apache CXF library and is not limited to any specific operating system.