CVE-2024-37309

CrateDB is a distributed SQL database. A high-risk vulnerability has been identified in versions prior to 5.7.2 where the TLS endpoint (port 4200) permits client-initiated renegotiation. In this scenario, an attacker can exploit this feature to repeatedly request renegotiation of security parameters during an ongoing TLS session. This flaw could lead to excessive consumption of CPU resources, resulting in potential server overload and service disruption. The vulnerability was confirmed using an openssl client where the command `R` initiates renegotiation, followed by the server confirming with `RENEGOTIATING`. This vulnerability allows an attacker to perform a denial of service attack by exhausting server CPU resources through repeated TLS renegotiations. This impacts the availability of services running on the affected server, posing a significant risk to operational stability and security. TLS 1.3 explicitly forbids renegotiation, since it closes a window of opportunity for an attack. Version 5.7.2 of CrateDB contains the fix for the issue.

• CWE-770

• https://cratedb.com/docs/crate/reference/en/latest/appendices/release-notes/5.7.2.htmlRelease Notes
• https://github.com/crate/crate/commit/1dde03bdf031a20886065195527e368e4a3218b3Patch
• https://github.com/crate/crate/security/advisories/GHSA-x268-qpg6-w9g2Exploit, Vendor Advisory
• https://cratedb.com/docs/crate/reference/en/latest/appendices/release-notes/5.7.2.htmlRelease Notes
• https://github.com/crate/crate/commit/1dde03bdf031a20886065195527e368e4a3218b3Patch
• https://github.com/crate/crate/security/advisories/GHSA-x268-qpg6-w9g2Exploit, Vendor Advisory

Published

Jun 13, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-37303Synapse is an open-source Matrix homeserver. Synapse before …5.3
• CVE-2024-37304NuGet Gallery is a package repository that powers nuget.org.…6.1
• CVE-2024-37305oqs-provider is a provider for the OpenSSL 3 cryptography li…8.2
• CVE-2024-37306Computer Vision Annotation Tool (CVAT) is an interactive vid…7.1
• CVE-2024-37307Cilium is a networking, observability, and security solution…6.5
• CVE-2024-37308The Cooked Pro recipe plugin for WordPress is vulnerable to …5.4
• CVE-2024-3731The Customer Reviews for WooCommerce plugin for WordPress is…6.1
• CVE-2024-37310EVerest is an EV charging software stack. An integer overflo…9
• CVE-2024-37311Collabora Online is a collaborative online office suite base…8.2
• CVE-2024-37312user_oidc app is an OpenID Connect user backend for Nextclou…6.3
• CVE-2024-37313Nextcloud server is a self hosted personal cloud system. Und…7.5
• CVE-2024-37314Nextcloud Photos is a photo management app. Users can remove…3.5