Bug 2321214 (CVE-2024-10270) - CVE-2024-10270 org.keycloak:keycloak-services: Keycloak Denial of Service
Summary: CVE-2024-10270 org.keycloak:keycloak-services: Keycloak Denial of Service
Keywords:
Status: NEW
Alias: CVE-2024-10270
Deadline: 2024-11-21
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2024-10-23 01:55 UTC by OSIDB Bzimport
Modified: 2026-01-04 06:22 UTC (History)
42 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2024:10175 0 None None None 2024-11-21 19:23:30 UTC
Red Hat Product Errata RHSA-2024:10176 0 None None None 2024-11-21 19:23:55 UTC
Red Hat Product Errata RHSA-2024:10177 0 None None None 2024-11-21 19:24:33 UTC
Red Hat Product Errata RHSA-2024:10178 0 None None None 2024-11-21 19:24:51 UTC

Description OSIDB Bzimport 2024-10-23 01:55:08 UTC
A vulnerability was found in Keycloak-services package. If untrusted data is passed to
the method (SearchQueryUtils), it could lead to a denial-of-service scenario by exhausting system resources.

Comment 1 errata-xmlrpc 2024-11-21 19:23:28 UTC
This issue has been addressed in the following products:

  Red Hat build of Keycloak 24

Via RHSA-2024:10175 https://access.redhat.com/errata/RHSA-2024:10175

Comment 2 errata-xmlrpc 2024-11-21 19:23:53 UTC
This issue has been addressed in the following products:

  Red Hat build of Keycloak 24.0.9

Via RHSA-2024:10176 https://access.redhat.com/errata/RHSA-2024:10176

Comment 3 errata-xmlrpc 2024-11-21 19:24:30 UTC
This issue has been addressed in the following products:

  Red Hat build of Keycloak 26.0

Via RHSA-2024:10177 https://access.redhat.com/errata/RHSA-2024:10177

Comment 4 errata-xmlrpc 2024-11-21 19:24:48 UTC
This issue has been addressed in the following products:

  Red Hat build of Keycloak 26.0.6

Via RHSA-2024:10178 https://access.redhat.com/errata/RHSA-2024:10178

Comment 5 kaylafannin042 2024-11-25 07:45:14 UTC
(In reply to errata-xmlrpc from comment #3)
> This issue has been addressed in the following products:
> 
>   Red Hat build of Keycloak 26.0
> 
> Via RHSA-2024:10177 https://slope3.com https://access.redhat.com/errata/RHSA-2024:10177



Link ID: Red Hat Product Errata RHSA-2024:10177

Comment 7 evelynwang0308 2025-05-14 08:59:04 UTC
(In reply to errata-xmlrpc from comment #4)
> This issue has been addressed in the following products:
> 
>   Red Hat build of Keycloak 26.0.6
> 
> Via RHSA-2024:10178 https://grade-calculator.io/ https://access.redhat.com/errata/RHSA-2024:10178

Link ID: Red Hat Product Errata RHSA-2024:10178

Comment 8 TomBrooks 2025-08-15 03:52:50 UTC
(In reply to errata-xmlrpc from comment #5)
> This issue has been addressed in the following products:
> 
>   Red Hat build of Keycloak 26.0.6
> 
> Via RHSA-2024:10178 https://doodlejump24.io/ https://access.redhat.com/errata/RHSA-2024:10178

Link ID: Red Hat Product Errata RHSA-2024:10178

I really value all the work you've put into this. Thanks for giving us such useful information.

Comment 9 Anna Lime 2025-09-25 03:54:47 UTC
This issue has been addressed in the following products:
> 
>   Red Hat build of Keycloak 26.0.6
> 
> Via RHSA-2024:10178 https://cargamesonline.io/ https://access.redhat.com/errata/RHSA-2024:10178
I sincerely appreciate all of your hard work on this. We appreciate you providing us with this helpful information.

Comment 10 Alice Sphere 2025-11-13 08:45:30 UTC
(In reply to errata-xmlrpc from comment #4)
> This issue has been addressed in the following products:
> 
>   Red Hat build of Keycloak 26.0.6
> 
> Via RHSA-2024:10178 https://wheelielife.io/ https://access.redhat.com/errata/RHSA-2024:10178

Link ID: Red Hat Product Errata RHSA-2024:10176

Comment 11 pixelflowguide 2025-12-22 03:47:18 UTC
Thanks for sharing this important security update about Keycloak vulnerabilities. It's crucial to stay informed about these issues. Speaking of helpful resources, when I need gaming help, I always check out the https://www.pixel-flow-level.com for great puzzle solutions.

Comment 12 pixelflowguide 2025-12-22 03:47:32 UTC
Thanks for sharing this important security update about Keycloak vulnerabilities. It's crucial to stay informed about these issues. Speaking of helpful resources, when I need gaming help, I always check out the https://www.pixel-flow-level.com for great puzzle solutions.

Comment 13 Marien 2026-01-03 13:27:39 UTC
Thanks for the detailed update and references. It’s good to see this Keycloak issue has been properly addressed across supported versions via official Red Hat advisories. Staying on top of security fixes like this is critical. For anyone also dealing with time tracking or work-hour calculations alongside system administration tasks, https://calcoloorelavorative.it/ can be quite useful in day-to-day workflows.

Comment 14 Johnny 2026-01-04 06:22:33 UTC
Thank you for sharing. https://connectionssolver.com/nyt-capture-solver-answers


Note You need to log in before you can comment on or make changes to this bug.