GHSA-2vp8-jv5v-6qh6

ghsaUSosv

Allocation of resources without limits or throttling in keycloak-model-infinispan

view advisory published 2021-07-13Licence: CC-BY-4.0

A flaw was found in keycloak-model-infinispan in keycloak versions before 14.0.0 where authenticationSessions map in RootAuthenticationSessionEntity grows boundlessly which could lead to a DoS attack.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2021-3637US	high7.5	1.13% (66th)	—	2021-07-09
A flaw was found in keycloak-model-infinispan in keycloak versions before 14.0.0 where authenticationSessions map in RootAuthenticationSessionEntity grows boundlessly which could l…

references

External citations — patches, advisories, analysis.

https://bugzilla.redhat.com/show_bug.cgi?id=1979638WEB
https://nvd.nist.gov/vuln/detail/CVE-2021-3637ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan