Description

A security issue was discovered in the LRA Coordinator component of Narayana. When Cancel is called in LRA, an execution time of approximately 2 seconds occurs. If Join is called with the same LRA ID within that timeframe, the application may crash or hang indefinitely, leading to a denial of service.

INFO

Published Date :

2025-01-02T20:19:29.671Z

Last Modified :

2025-11-11T00:43:36.485Z

Source :

redhat
AFFECTED PRODUCTS

The following products are affected by CVE-2024-8447 vulnerability.

Vendors Products
Redhat
  • Jboss Data Grid
  • Jboss Enterprise Application Platform
  • Jbosseapxp
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-8447.

URL Resource
https://access.redhat.com/errata/RHSA-2025:3357 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:3358 cve-icon cve-icon
https://access.redhat.com/errata/RHSA-2025:7620 cve-icon cve-icon
https://access.redhat.com/security/cve/CVE-2024-8447 cve-icon cve-icon
https://bugzilla.redhat.com/show_bug.cgi?id=2335206 cve-icon cve-icon
https://github.com/jbosstm/narayana/pull/2293 cve-icon cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-8447 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-8447 cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact