PT-2025-1683 · Red Hat+1 · Keycloak+1

Chase Bowman · Published 2025-01-13 · Updated 2025-11-01 · CVE-2024-11734

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Keycloak (affected versions not specified)

Description A denial of service issue was found in Keycloak that could allow an administrative user with the right to change realm settings to disrupt the service. This action is done by modifying any of the security headers and inserting newlines, which causes the Keycloak server to write to a request that has already been terminated, leading to the failure of said request. Service disruption may happen, and users will be unable to access applications relying on Keycloak, or any of the consoles provided by Keycloak itself on the affected realm.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Protection Mechanism Failure

Weakness Enumeration

CWE-693

Related Identifiers

ALT-PU-2025-13422

ALT-PU-2025-2871

CVE-2024-11734

GHSA-W3G8-R9GW-QRH8

Affected Products

Alt Linux

Keycloak

References · 14

• https://nvd.nist.gov/vuln/detail/CVE-2024-11734 · Security Note
• https://access.redhat.com/errata/RHSA-2025:0299 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-w3g8-r9gw-qrh8 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2025:0300 · Vendor Advisory
• https://github.com/keycloak/keycloak · Note
• https://github.com/keycloak/keycloak/commit/93b2a7327b2557eb132a8169086c5e63c81dff79 · Note
• https://github.com/keycloak/keycloak/security/advisories/GHSA-w3g8-r9gw-qrh8 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=2328846 · Note
• https://t.me/cvedetector/15239 · Telegram Post
• https://twitter.com/seraphyn/status/1879099559261110744 · Twitter Post
• https://access.redhat.com/security/cve/CVE-2024-11734 · Note
• https://t.me/cvenotify/107282 · Telegram Post
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-11734 · Note
• https://twitter.com/CVEnew/status/1879086479886180587 · Twitter Post