CVE-2024-57646

What it actually does

Improper input validation in the psiginfo component allows crafted SQL statements to trigger a denial of service condition.

Why it matters to the business

Attackers can interrupt database or application availability, leading to unplanned downtime and operational disruption until the service is restored.

How an attack unfolds

An attacker with the ability to submit SQL statements supplies specially crafted input that the psiginfo component fails to handle safely, causing the process to crash or hang.

How to fix it

Upgrade affected packages to the listed fixed versions: tomcat6 and related components on Red Hat JBoss Enterprise Web Server 1 for EL4 to 0:6.0.18-11.3.ep5.el4 and for EL5 to 0:6.0.18-12.0.ep5.el5.

How to confirm the fix worked

Confirm the installed package versions match or exceed the fixed releases and test that previously effective crafted SQL statements no longer cause service interruption.

Typical attack path

1. Identify an exposed interface that accepts SQL statements
2. Craft malicious SQL input targeting the psiginfo component
3. Submit the input to trigger the denial of service
4. Observe service unavailability or repeated crashes

How to detect it

Review application and database logs for repeated crashes or error patterns coinciding with unusual SQL statements; correlate with process termination events.

What your security team should do

• Apply the specified package updates immediately on all affected Red Hat JBoss Enterprise Web Server systems
• Review SQL input handling and add defensive controls such as statement validation or rate limiting
• Monitor for service restarts or crashes after changes are deployed