Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

Rundeck Spring RSocket may lose memory from bad SETUP frame

published 14 days ago
Summary

The Rundeck application that uses Spring RSocket can consume increasing amounts of memory when it receives a specially crafted SETUP packet. Over time this can slow the system down or cause it to stop working. Apply the latest Rundeck update or patch that corrects the handling of these packets.

What to do
  • Update cleanstart rundeck to version 6.1.0-r0.
Affected software
Ecosystem VendorProductAffected versions
CleanStart cleanstart rundeck < 6.1.0-r0
Fix: upgrade to 6.1.0-r0
Original advisory text
Spring RSocket application is exposed to a memory leak via a malformed SETUP frame
Security vulnerability affects the rundeck package. A Spring RSocket application is exposed to a memory leak via a malformed SETUP frame.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
7.5 High
Timeline
Published22 Oct 2026
Updated22 Oct 2026
First seen22 Oct 2026
Sources
CLEANSTART-2026-FZ12567 · OSV
Track software like this
Free during beta