High severity7.5NVD Advisory· Published Feb 29, 2024· Updated Jun 17, 2026
CVE-2024-22871
CVE-2024-22871
Description
An issue in Clojure versions 1.20 to 1.12.0-alpha5 allows an attacker to cause a denial of service (DoS) via the clojure.core$partial$fn__5920 function.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
org.clojure:clojureMaven | >= 1.7.0, < 1.11.2 | 1.11.2 |
org.clojure:clojureMaven | >= 1.12.0-alpha1, < 1.12.0-alpha9 | 1.12.0-alpha9 |
Affected products
18- Clojure/Clojuredescription
- osv-coords5 versionspkg:rpm/opensuse/clojure&distro=openSUSE%20Tumbleweedpkg:maven/org.clojure/clojurepkg:apk/chainguard/cass-config-builderpkg:apk/chainguard/cass-config-builder-11-jre-bcfipspkg:apk/wolfi/cass-config-builder
< 1.11.2.1446-1.1+ 4 more
- (no CPE)range: < 1.11.2.1446-1.1
- (no CPE)range: >= 1.7.0, < 1.11.2
- (no CPE)range: < 1.0.8-r3
- (no CPE)range: < 1.0.8-r1
- (no CPE)range: < 1.0.8-r3
cpe:2.3:a:clojure:clojure:*:*:*:*:*:*:*:*+ 8 more
- cpe:2.3:a:clojure:clojure:*:*:*:*:*:*:*:*range: >=1.2.0,<1.11.2
- cpe:2.3:a:clojure:clojure:1.12.0:alpha1:*:*:*:*:*:*
- cpe:2.3:a:clojure:clojure:1.12.0:alpha2:*:*:*:*:*:*
- cpe:2.3:a:clojure:clojure:1.12.0:alpha3:*:*:*:*:*:*
- cpe:2.3:a:clojure:clojure:1.12.0:alpha4:*:*:*:*:*:*
- cpe:2.3:a:clojure:clojure:1.12.0:alpha5:*:*:*:*:*:*
- cpe:2.3:a:clojure:clojure:1.12.0:alpha6:*:*:*:*:*:*
- cpe:2.3:a:clojure:clojure:1.12.0:alpha7:*:*:*:*:*:*
- cpe:2.3:a:clojure:clojure:1.12.0:alpha8:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:40:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
16- hackmd.io/%40fe1w0/rymmJGidanvdExploitWEB
- github.com/advisories/GHSA-vr64-r9qj-h27fghsaADVISORY
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/25FKUOYXQZGGJMFUM5HJABWMIX2TILRV/nvdThird Party Advisory
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SWWK2SO2MH4SXPO6L444MM6LHVLVFULV/nvdThird Party Advisory
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YFPGUDXMW6OXKIDGCOZFEAXO74VQIB2T/nvdThird Party Advisory
- nvd.nist.gov/vuln/detail/CVE-2024-22871ghsaADVISORY
- clojure.atlassian.net/browse/CLJ-2839ghsaWEB
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/25FKUOYXQZGGJMFUM5HJABWMIX2TILRVghsaWEB
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SWWK2SO2MH4SXPO6L444MM6LHVLVFULVghsaWEB
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YFPGUDXMW6OXKIDGCOZFEAXO74VQIB2TghsaWEB
- lists.fedoraproject.org/archives/list/[email protected]/message/25FKUOYXQZGGJMFUM5HJABWMIX2TILRVghsaWEB
- lists.fedoraproject.org/archives/list/[email protected]/message/SWWK2SO2MH4SXPO6L444MM6LHVLVFULVghsaWEB
- lists.fedoraproject.org/archives/list/[email protected]/message/YFPGUDXMW6OXKIDGCOZFEAXO74VQIB2TghsaWEB
- lists.fedoraproject.org/archives/list/[email protected]/message/25FKUOYXQZGGJMFUM5HJABWMIX2TILRV/nvd
- lists.fedoraproject.org/archives/list/[email protected]/message/SWWK2SO2MH4SXPO6L444MM6LHVLVFULV/nvd
- lists.fedoraproject.org/archives/list/[email protected]/message/YFPGUDXMW6OXKIDGCOZFEAXO74VQIB2T/nvd
News mentions
0No linked articles in our index yet.