You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@solr.apache.org by "Eric Pugh (Jira)" <ji...@apache.org> on 2026/08/11 13:13:00 UTC
[jira] [Resolved] (SOLR-17833) Assess expoitability of CVE-2024-7254 in dependency `protobuf-java`
[ https://issues.apache.org/jira/browse/SOLR-17833?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Eric Pugh resolved SOLR-17833.
------------------------------
Fix Version/s: 9.11
Resolution: Fixed
I am labeling this 9.11, but actually, this gets resolved by publishing a VEX file on our Solr website, so it really isn't tied to a "fix version". But maybe this is of most interest to folks when 9.11 comes out?
> Assess expoitability of CVE-2024-7254 in dependency `protobuf-java`
> -------------------------------------------------------------------
>
> Key: SOLR-17833
> URL: https://issues.apache.org/jira/browse/SOLR-17833
> Project: Solr
> Issue Type: Task
> Reporter: Piotr Karwasz
> Assignee: Eric Pugh
> Priority: Major
> Labels: security
> Fix For: 9.11
>
>
> h2. Vulnerability Assessment Request
> Please assess the exploitability of the following vulnerability in Apache Solr:
> * *Dependency*: `protobuf-java`
> * *CVE ID*: `CVE-2024-7254`
> * *GHSA ID*: `GHSA-735f-pc8j-v9w8`
> * *Severity*: `high`
> protobuf-java has potential Denial of Service issue
> h3. Context
> This issue was automatically created to track and assess the impact of the reported vulnerability on Apache Solr.
> Please provide your analysis and recommended actions.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@solr.apache.org
For additional commands, e-mail: issues-help@solr.apache.org