CVE-2024-8447
1 advisory.
Maven/org.jboss.narayana.rts:lra-coordinator-jar CVE-2024-8447: medium 5.9
Narayana deadlock via multiple join requests sent to LRA Coordinator
Action: Upgrade org.jboss.narayana.rts:lra-coordinator-jar to 7.1.0.Final or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 7.1.0.Final | - |
Fixed versions
| 7.1.0.Final |
Sources
- osv: GHSA-qq9f-q439-2574
- https://nvd.nist.gov/vuln/detail/CVE-2024-8447
- https://github.com/jbosstm/narayana/pull/2293
- https://github.com/jbosstm/narayana/commit/eb778412de230afc4687a2df43641280494156c5
- https://access.redhat.com/errata/RHSA-2025:3357
- https://access.redhat.com/errata/RHSA-2025:3358
- https://access.redhat.com/errata/RHSA-2025:7620
- https://access.redhat.com/security/cve/CVE-2024-8447
- https://bugzilla.redhat.com/show_bug.cgi?id=2335206
- https://github.com/jbosstm/narayana
CVE-2024-8447 · published · modified · JSON