Impact of HTTP Smuggling on Load Balancers and Systems
CVE-2024-9622

5.3MEDIUM

Key Information:

Status: Red Hat Jboss Data Grid 7; Red Hat Jboss Enterprise Application Platform 7; Red Hat Jboss Enterprise Application Platform 8
Vendor: CVE Published:; 8 October 2024

What is CVE-2024-9622?

The Resteasy-Netty4 library contains a vulnerability linked to improper handling of HTTP requests that employs smuggling techniques. Specifically, this issue arises when an HTTP smuggling request containing an ASCII control character triggers the Netty HttpObjectDecoder to enter a BAD_MESSAGE state. As a consequence, any subsequent legitimate requests on the same connection are disregarded, resulting in client timeouts. This behavior can significantly impact systems that utilize load balancers, thereby increasing their exposure to potential risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch