CVE-2024-37309
1 advisory.
Maven/io.crate:crate CVE-2024-37309: medium 5.3
CrateDB has a Client initialized Session-Renegotiation DoS
Action: Upgrade io.crate:crate to 5.7.2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.7.2 | - |
Fixed versions
| 5.7.2 |
Sources
- osv: GHSA-x268-qpg6-w9g2
- https://github.com/crate/crate/security/advisories/GHSA-x268-qpg6-w9g2
- https://nvd.nist.gov/vuln/detail/CVE-2024-37309
- https://github.com/crate/crate/commit/1dde03bdf031a20886065195527e368e4a3218b3
- https://cratedb.com/docs/crate/reference/en/latest/appendices/release-notes/5.7.2.html
- https://github.com/crate/crate
CVE-2024-37309 · published · modified · JSON