Apache CXF Memory Leak Vulnerability

CVE-2024-41172

What is CVE-2024-41172?

A vulnerability in the Apache CXF HTTP client conduit can lead to increased memory usage, as instances of HTTPClient may not be eligible for garbage collection in versions prior to 3.6.4 and 4.0.5. This improper memory management can result in applications experiencing significant memory consumption over time, which may ultimately exhaust available memory resources, leading to performance degradation or application crashes.

References