Bug 2553104 (CVE-2026-102462) - CVE-2026-102462 io.vertx/vertx-mssql-client: Vert.x MSSQL client: Denial of Service via unbounded memory allocation during TDS packet processing
Summary: CVE-2026-102462 io.vertx/vertx-mssql-client: Vert.x MSSQL client: Denial of S...
Keywords:
Status: NEW
Alias: CVE-2026-102462
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-10-15 08:35 UTC by OSIDB Bzimport
Modified: 2026-11-03 14:13 UTC (History)
12 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2026-10-15 08:35:23 UTC 
In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the TDS message decoder in the Vert.x MSSQL client (vertx-mssql-client) aggregates inbound TDS packets into a composite direct-memory buffer without any cumulative size limit. A malicious, compromised, or man-in-the-middle SQL Server can send a continuous stream of TDS packets without setting the END_OF_MESSAGE status flag, causing unbounded direct-memory allocation on the client and leading to an out-of-memory crash. This occurs before authentication completes.



The impacted component is io.vertx:vertx-mssql-client.
Note You need to log in before you can comment on or make changes to this bug.