PT-2024-16150 · Red Hat+1 · Keycloak-Services+2
Published
2024-10-29
·
Updated
2026-05-06
·
CVE-2024-10270
CVSS v4.0
7.1
High
| Vector | AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
Keycloak-services (affected versions not specified)
Red Hat products (affected versions not specified)
Description
A vulnerability was found in the Keycloak-services package. If untrusted data is passed to the
SearchQueryUtils method, it could lead to a denial of service (DoS) scenario by exhausting system resources due to a Regex complexity.Recommendations
As a temporary workaround, consider disabling the
SearchQueryUtils method until a patch is available.
Ensure your systems are updated to the latest versions to mitigate risks.
For detailed remediation steps, check the official advisory or Bugzilla report.
Apply the latest patches and updates as detailed in RHSA-2024:10177 to mitigate risks.Fix
DoS
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Keycloak
Keycloak-Services