Skip to main content

Deadlock

CVE-2024-8447

Medium
5.9/10

Summary

A security issue was discovered in the LRA Coordinator component of Narayana. When Cancel is called in LRA, an execution time of approximately 2 seconds occurs. If Join is called with the same LRA ID within that timeframe, the application may crash or hang indefinitely, leading to a denial of service.This issue affects org.jboss.narayana.rts:lra-coordinator-jar prior to 7.1.0.Final.

  • HIGH
  • NETWORK
  • NONE
  • UNCHANGED
  • NONE
  • NONE
  • NONE
  • HIGH

CWE-833 - Deadlock

The software contains multiple threads or executable segments that are waiting for each other to release a necessary lock, resulting in deadlock.

References

Advisory Timeline

  • Published