CVE-2024-4029Wildfly: no timeout for eap management interface may lead to denial of service (dos)
- 4.1MediumCVSS base score
- 0.28%Exploitation in 30 daysEPSS · top 80% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
A vulnerability was found in Wildfly’s management interface. Due to the lack of limitation of sockets for the management interface, it may be possible to cause a denial of service hitting the nofile limit as there is no possibility to configure or set a maximum number of connections.
Timeline
ID reserved
By redhat
- 10 days later
· 10 days later
Published
- 3 years later
· 3 years later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| redhatCNA (assigner) | 3.1 | Medium4.1 | CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H |
| NVDNVD · Deferred | 3.1 | Medium4.1 | CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H |
- EPSS (exploitation in 30 days)
- 0.28% · top 80% of all CVEs (13 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: partial
The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 4.1.
Affected products
wildfly
- affected < 24.0.1.Final
- unaffected 25.0.0.Final – < *
Red Hat · Red Hat JBoss Enterprise Application Platform
- unaffected 15.0.39.Final-redhat-00001 – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8
- unaffected 0:3.3.24-1.Final_redhat_00001.1.el8eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8
- unaffected 0:6.0.23-2.SP1_redhat_00001.1.el8eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8
- unaffected 0:1.1.3-1.redhat_00001.1.el8eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8
- unaffected 0:1.5.18-1.Final_redhat_00001.1.el8eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8
- unaffected 0:1.1.3-1.redhat_00001.1.el8eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8
- unaffected 0:4.0.55-1.Final_redhat_00001.1.el8eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8
- unaffected 0:1.10.0-39.Final_redhat_00039.1.el8eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8
- unaffected 0:5.4.12-1.Final_redhat_00001.1.el8eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8
- unaffected 0:1.15.4-1.redhat_00003.1.el8eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8
- unaffected 0:2.0.15-1.Final_redhat_00001.1.el8eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8
- unaffected 0:7.4.19-1.GA_redhat_00002.1.el8eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8
- unaffected 0:2.7.1-37.redhat_00015.1.el8eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9
- unaffected 0:3.3.24-1.Final_redhat_00001.1.el9eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9
- unaffected 0:6.0.23-2.SP1_redhat_00001.1.el9eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9
- unaffected 0:1.1.3-1.redhat_00001.1.el9eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9
- unaffected 0:1.5.18-1.Final_redhat_00001.1.el9eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9
- unaffected 0:1.1.3-1.redhat_00001.1.el9eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9
- unaffected 0:4.0.55-1.Final_redhat_00001.1.el9eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9
- unaffected 0:1.10.0-39.Final_redhat_00039.1.el9eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9
- unaffected 0:5.4.12-1.Final_redhat_00001.1.el9eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9
- unaffected 0:1.15.4-1.redhat_00003.1.el9eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9
- unaffected 0:2.0.15-1.Final_redhat_00001.1.el9eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9
- unaffected 0:7.4.19-1.GA_redhat_00002.1.el9eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9
- unaffected 0:2.7.1-37.redhat_00015.1.el9eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7
- unaffected 0:3.3.24-1.Final_redhat_00001.1.el7eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7
- unaffected 0:6.0.23-2.SP1_redhat_00001.1.el7eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7
- unaffected 0:1.1.3-1.redhat_00001.1.el7eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7
- unaffected 0:1.5.18-1.Final_redhat_00001.1.el7eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7
- unaffected 0:1.1.3-1.redhat_00001.1.el7eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7
- unaffected 0:4.0.55-1.Final_redhat_00001.1.el7eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7
- unaffected 0:1.10.0-39.Final_redhat_00039.1.el7eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7
- unaffected 0:5.4.12-1.Final_redhat_00001.1.el7eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7
- unaffected 0:1.15.4-1.redhat_00003.1.el7eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7
- unaffected 0:2.0.15-1.Final_redhat_00001.1.el7eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7
- unaffected 0:7.4.19-1.GA_redhat_00002.1.el7eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7
- unaffected 0:2.7.1-37.redhat_00015.1.el7eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8
All versions: unaffected
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
- unaffected 0:2.33.0-1.redhat_00015.1.el8eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
- unaffected 1:2.0.0-2.redhat_00005.1.el8eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
- unaffected 0:1.8.0-2.redhat_00001.1.el8eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
- unaffected 0:2.2.0-2.redhat_00001.1.el8eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
- unaffected 0:1.16.1-2.redhat_00007.1.el8eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
- unaffected 0:3.2.2-28.redhat_2.1.el8eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
- unaffected 0:2.15.1-1.redhat_00001.1.el8eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
- unaffected 0:3.14.0-2.redhat_00006.1.el8eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
- unaffected 0:4.0.5-1.redhat_00001.1.el8eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
- unaffected 1:2.0.0-2.redhat_00005.1.el8eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
- unaffected 0:2.0.1-1.redhat_00002.1.el8eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
- unaffected 0:0.1.0-2.redhat_00010.1.el8eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
- unaffected 0:1.12.284-2.redhat_00002.1.el8eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
- unaffected 0:1.2.5-2.redhat_00001.1.el8eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
- unaffected 0:800.4.0-1.GA_redhat_00001.1.el8eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
- unaffected 0:2.1.0-4.redhat_00001.1.el8eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
- unaffected 0:6.2.31-1.Final_redhat_00002.1.el8eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
- unaffected 0:8.0.1-3.Final_redhat_00001.1.el8eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
- unaffected 0:0.8.1-2.redhat_00001.1.el8eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
- unaffected 0:1.1.3-1.redhat_00001.1.el8eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
- unaffected 0:3.0.1-1.redhat_00001.1.el8eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
- unaffected 0:1.1.3-1.redhat_00001.1.el8eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
- unaffected 0:3.5.3-1.Final_redhat_00001.1.el8eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
- unaffected 0:4.0.2-1.redhat_00001.1.el8eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
- unaffected 0:5.3.10-1.Final_redhat_00001.1.el8eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
- unaffected 0:2.22.1-1.redhat_00002.1.el8eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
- unaffected 0:6.0.3-1.Final_redhat_00001.1.el8eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
- unaffected 0:9.37.3-1.redhat_00001.1.el8eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
- unaffected 0:9.6.0-1.redhat_00002.1.el8eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
- unaffected 0:2.3.0-1.redhat_00001.1.el8eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
- unaffected 0:2.0.1-3.Final_redhat_00001.1.el8eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
- unaffected 0:3.0.1-2.Final_redhat_00001.1.el8eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
- unaffected 0:3.0.4-1.redhat_00001.1.el8eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
- unaffected 0:8.0.0-6.redhat_00001.1.el8eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
- unaffected 0:2.0.16-1.redhat_00001.1.el8eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
- unaffected 0:2.2.0-1.redhat_00001.1.el8eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
- unaffected 0:8.0.4-2.GA_redhat_00005.1.el8eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
- unaffected 0:2.33.0-1.redhat_00015.1.el9eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
- unaffected 1:2.0.0-2.redhat_00005.1.el9eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
- unaffected 0:1.8.0-2.redhat_00001.1.el9eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
- unaffected 0:2.2.0-2.redhat_00001.1.el9eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
- unaffected 0:1.16.1-2.redhat_00007.1.el9eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
- unaffected 0:3.2.2-28.redhat_2.1.el9eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
- unaffected 0:2.15.1-1.redhat_00001.1.el9eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
- unaffected 0:3.14.0-2.redhat_00006.1.el9eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
- unaffected 0:4.0.5-1.redhat_00001.1.el9eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
- unaffected 1:2.0.0-2.redhat_00005.1.el9eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
- unaffected 0:2.0.1-1.redhat_00002.1.el9eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
- unaffected 0:0.1.0-2.redhat_00010.1.el9eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
- unaffected 0:1.12.284-2.redhat_00002.1.el9eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
- unaffected 0:1.2.5-2.redhat_00001.1.el9eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
- unaffected 0:800.4.0-1.GA_redhat_00001.1.el9eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
- unaffected 0:2.1.0-4.redhat_00001.1.el9eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
- unaffected 0:6.2.31-1.Final_redhat_00002.1.el9eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
- unaffected 0:8.0.1-3.Final_redhat_00001.1.el9eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
- unaffected 0:0.8.1-2.redhat_00001.1.el9eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
- unaffected 0:1.1.3-1.redhat_00001.1.el9eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
- unaffected 0:3.0.1-1.redhat_00001.1.el9eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
- unaffected 0:1.1.3-1.redhat_00001.1.el9eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
- unaffected 0:3.5.3-1.Final_redhat_00001.1.el9eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
- unaffected 0:4.0.2-1.redhat_00001.1.el9eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
- unaffected 0:5.3.10-1.Final_redhat_00001.1.el9eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
- unaffected 0:2.22.1-1.redhat_00002.1.el9eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
- unaffected 0:6.0.3-1.Final_redhat_00001.1.el9eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
- unaffected 0:9.37.3-1.redhat_00001.1.el9eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
- unaffected 0:9.6.0-1.redhat_00002.1.el9eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
- unaffected 0:2.3.0-1.redhat_00001.1.el9eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
- unaffected 0:2.0.1-3.Final_redhat_00001.1.el9eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
- unaffected 0:3.0.1-2.Final_redhat_00001.1.el9eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
- unaffected 0:3.0.4-1.redhat_00001.1.el9eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
- unaffected 0:8.0.0-6.redhat_00001.1.el9eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
- unaffected 0:2.0.16-1.redhat_00001.1.el9eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
- unaffected 0:2.2.0-1.redhat_00001.1.el9eap – < *
Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
- unaffected 0:8.0.4-2.GA_redhat_00005.1.el9eap – < *
Red Hat · Red Hat Build of Keycloak
All versions: unaffected
All versions: unaffected
All versions: unknown
Red Hat · Red Hat JBoss Data Grid 7
All versions: unknown
Red Hat · Red Hat JBoss Enterprise Application Platform Expansion Pack
All versions: unaffected
Red Hat · Red Hat Process Automation 7
All versions: unknown
Red Hat · Red Hat Single Sign-On 7
All versions: affected
Affected packages
From reviewed advisories of the GitHub Advisory Database.
- Mavenorg.wildfly:wildfly-domain-httpGHSA-x7g6-rwhc-g7mj (opens in a new tab)
What to do
Workaround: Currently there is no available mitigation for this vulnerability. Please make sure to perform updates as they become available.
References
References12
- RHSA-2024:8075 (opens in a new tab)vendor-advisoryx_refsource_REDHAT
- RHSA-2024:8076 (opens in a new tab)vendor-advisoryx_refsource_REDHAT
- RHSA-2024:8077 (opens in a new tab)vendor-advisoryx_refsource_REDHAT
- RHSA-2024:8080 (opens in a new tab)vendor-advisoryx_refsource_REDHAT
- RHSA-2024:8823 (opens in a new tab)vendor-advisoryx_refsource_REDHAT
- RHSA-2024:8824 (opens in a new tab)vendor-advisoryx_refsource_REDHAT
- RHSA-2024:8826 (opens in a new tab)vendor-advisoryx_refsource_REDHAT
- https://access.redhat.com/security/cve/CVE-2024-4029 (opens in a new tab)vdb-entryx_refsource_REDHATx_transferred
- RHBZ#2278615 (opens in a new tab)issue-trackingx_refsource_REDHATx_transferred
- https://github.com/advisories/GHSA-x7g6-rwhc-g7mj (opens in a new tab)
- https://github.com/wildfly/wildfly/pull/17914 (opens in a new tab)
- https://github.com/wildfly/wildfly/pull/17935 (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2024-1854 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisory GHSA-x7g6-rwhc-g7mj (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2024-4029)Record last updated .