CVE-2024-9622

Summary

CVE-2024-9622 is a newly discovered vulnerability affecting the resteasy-netty4 library. The issue stems from a failure to properly manage HTTP requests utilizing smuggling techniques. When an HTTP smuggling request containing an ASCII control character is received, the Netty HttpObjectDecoder transitions into a BAD_MESSAGE state. Consequently, any subsequent legitimate requests on the same connection are disregarded, resulting in client timeouts. This condition can impact systems using load balancers and potentially expose them to further risks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.