CVE-2024-1300: Memory leak in Eclipse Vert.x TCP servers with TLS and SNI. This vulnerability can lead to memory exhaustion and denial of service.

CVE-2024-1300 exposes a flaw in Eclipse Vert.x where TCP servers using TLS and Server Name Indication (SNI) incorrectly cache SSL contexts. This caching error, triggered by processing unknown SNI server names, results in a memory leak. An attacker can exploit this by sending TLS client hello messages with fabricated server names, eventually causing a JVM out-of-memory error and disrupting service. Although the CVSS score is 5.4, the SOCRadar Vulnerability Risk Score (SVRS) of 30 suggests a lower immediate risk compared to critical vulnerabilities. However, organizations using vulnerable versions of Eclipse Vert.x should implement recommended patches promptly to mitigate potential denial-of-service attacks and maintain system stability. This vulnerability is significant because it allows relatively simple attacks to exhaust server resources.