Red Hat Quarkus RESTEasy Memory Leak Vulnerability

A memory leak vulnerability has been identified in the Quarkus RESTEasy extension. This issue arises when client requests are made with short timeouts, causing buffers to be improperly released. The result is increased memory consumption, which can lead to an application crash due to an OutOfMemoryError.

Impact

Exploitation of this vulnerability causes a memory leak that can exhaust available memory, leading to an OutOfMemoryError and a complete application crash. In production environments, this poses a significant risk to service availability, especially for applications managing multiple concurrent requests.

Remediation

Users can upgrade to Red Hat build of Quarkus 3.15.3.SP1 or Red Hat build of Quarkus 3.8.6.SP3, both of which include the necessary fix. Instructions for applying this update are available on the Red Hat Customer Portal.