CVE-2024-4029: Red Hat Build Of Keycloak

Medium severity, CVSS 4.1. EPSS: 0.3% chance of exploitation in the next 30 days.

A vulnerability was found in Wildfly’s management interface. Due to the lack of limitation of sockets for the management interface, it may be possible to cause a denial of service hitting the nofile limit as there is no possibility to configure or set a maximum number of connections.

Affected products

  • Red Hat Red Hat Build Of Keycloak
  • Red Hat Red Hat Data Grid 8
  • Red Hat Red Hat Fuse 7
  • Red Hat Red Hat JBoss Data Grid 7
  • Red Hat Red Hat JBoss Enterprise Application Platform: before 15.0.39.Final-redhat-00001 (fixed in 15.0.39.Final-redhat-00001)
  • Red Hat Red Hat JBoss Enterprise Application Platform 7.4 For Rhel 8: before 0:3.3.24-1.Final_redhat_00001.1.el8eap (fixed in 0:3.3.24-1.Final_redhat_00001.1.el8eap); before 0:6.0.23-2.SP1_redhat_00001.1.el8eap (fixed in 0:6.0.23-2.SP1_redhat_00001.1.el8eap); before 0:1.1.3-1.redhat_00001.1.el8eap (fixed in 0:1.1.3-1.redhat_00001.1.el8eap); before 0:1.5.18-1.Final_redhat_00001.1.el8eap (fixed in 0:1.5.18-1.Final_redhat_00001.1.el8eap); before 0:4.0.55-1.Final_redhat_00001.1.el8eap (fixed in 0:4.0.55-1.Final_redhat_00001.1.el8eap); before 0:1.10.0-39.Final_redhat_00039.1.el8eap (fixed in 0:1.10.0-39.Final_redhat_00039.1.el8eap); …
  • Red Hat Red Hat JBoss Enterprise Application Platform 7.4 For Rhel 9: before 0:3.3.24-1.Final_redhat_00001.1.el9eap (fixed in 0:3.3.24-1.Final_redhat_00001.1.el9eap); before 0:6.0.23-2.SP1_redhat_00001.1.el9eap (fixed in 0:6.0.23-2.SP1_redhat_00001.1.el9eap); before 0:1.1.3-1.redhat_00001.1.el9eap (fixed in 0:1.1.3-1.redhat_00001.1.el9eap); before 0:1.5.18-1.Final_redhat_00001.1.el9eap (fixed in 0:1.5.18-1.Final_redhat_00001.1.el9eap); before 0:4.0.55-1.Final_redhat_00001.1.el9eap (fixed in 0:4.0.55-1.Final_redhat_00001.1.el9eap); before 0:1.10.0-39.Final_redhat_00039.1.el9eap (fixed in 0:1.10.0-39.Final_redhat_00039.1.el9eap); …
  • Red Hat Red Hat JBoss Enterprise Application Platform 7.4 On Rhel 7: before 0:3.3.24-1.Final_redhat_00001.1.el7eap (fixed in 0:3.3.24-1.Final_redhat_00001.1.el7eap); before 0:6.0.23-2.SP1_redhat_00001.1.el7eap (fixed in 0:6.0.23-2.SP1_redhat_00001.1.el7eap); before 0:1.1.3-1.redhat_00001.1.el7eap (fixed in 0:1.1.3-1.redhat_00001.1.el7eap); before 0:1.5.18-1.Final_redhat_00001.1.el7eap (fixed in 0:1.5.18-1.Final_redhat_00001.1.el7eap); before 0:4.0.55-1.Final_redhat_00001.1.el7eap (fixed in 0:4.0.55-1.Final_redhat_00001.1.el7eap); before 0:1.10.0-39.Final_redhat_00039.1.el7eap (fixed in 0:1.10.0-39.Final_redhat_00039.1.el7eap); …
  • Red Hat Red Hat JBoss Enterprise Application Platform 8
  • Red Hat Red Hat JBoss Enterprise Application Platform 8.0 For Rhel 8: before 0:2.33.0-1.redhat_00015.1.el8eap (fixed in 0:2.33.0-1.redhat_00015.1.el8eap); before 1:2.0.0-2.redhat_00005.1.el8eap (fixed in 1:2.0.0-2.redhat_00005.1.el8eap); before 0:1.8.0-2.redhat_00001.1.el8eap (fixed in 0:1.8.0-2.redhat_00001.1.el8eap); before 0:2.2.0-2.redhat_00001.1.el8eap (fixed in 0:2.2.0-2.redhat_00001.1.el8eap); before 0:1.16.1-2.redhat_00007.1.el8eap (fixed in 0:1.16.1-2.redhat_00007.1.el8eap); before 0:3.2.2-28.redhat_2.1.el8eap (fixed in 0:3.2.2-28.redhat_2.1.el8eap); …
  • Red Hat Red Hat JBoss Enterprise Application Platform 8.0 For Rhel 9: before 0:2.33.0-1.redhat_00015.1.el9eap (fixed in 0:2.33.0-1.redhat_00015.1.el9eap); before 1:2.0.0-2.redhat_00005.1.el9eap (fixed in 1:2.0.0-2.redhat_00005.1.el9eap); before 0:1.8.0-2.redhat_00001.1.el9eap (fixed in 0:1.8.0-2.redhat_00001.1.el9eap); before 0:2.2.0-2.redhat_00001.1.el9eap (fixed in 0:2.2.0-2.redhat_00001.1.el9eap); before 0:1.16.1-2.redhat_00007.1.el9eap (fixed in 0:1.16.1-2.redhat_00007.1.el9eap); before 0:3.2.2-28.redhat_2.1.el9eap (fixed in 0:3.2.2-28.redhat_2.1.el9eap); …
  • Red Hat Red Hat JBoss Enterprise Application Platform Expansion Pack
  • Red Hat Red Hat Process Automation 7
  • Red Hat Red Hat Single Sign-On 7

Published 2024-05-02. Last modified 2026-09-24.