CVE-2024-6875: 
Java vulnerability analysis and mitigation

A vulnerability (CVE-2024-6875) was discovered in the Infinispan component of Red Hat Data Grid. The vulnerability affects the REST compare API, which can experience a buffer leak leading to potential out-of-memory errors when subjected to continuous requests with large POST data (Red Hat CVE).

The vulnerability has been assigned a CVSS v3.1 Base Score of 6.5 (MEDIUM) with the vector string CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H. The issue is classified as CWE-401 (Missing Release of Memory after Effective Lifetime). The vulnerability specifically manifests when the REST compare API receives continual requests with large POST data, potentially leading to a 'Direct buffer memory' OutOfMemoryError condition (Red Hat Bugzilla).

The primary impact of this vulnerability is the potential for denial of service (DoS) through resource exhaustion. When exploited, it can cause an out-of-memory condition in the affected system, potentially disrupting service availability (Red Hat CVE).

The vulnerability requires authentication to exploit, as the REST endpoint is secured by default in Red Hat Data Grid. This means that while anonymous attackers cannot utilize this issue, authenticated malicious users could potentially execute a DoS attack (Red Hat Bugzilla).