Описание
A memory leak flaw was found in WildFly OpenSSL in versions prior to 1.1.3.Final, where it removes an HTTP session. It may allow the attacker to cause OOM leading to a denial of service. The highest threat from this vulnerability is to system availability.
Ссылки
- Issue TrackingPatchVendor Advisory
- PatchThird Party Advisory
- Permissions RequiredVendor Advisory
- Third Party Advisory
- Issue TrackingPatchVendor Advisory
- PatchThird Party Advisory
- Permissions RequiredVendor Advisory
- Third Party Advisory
Уязвимые конфигурации
Одно из
Одно из
EPSS
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
Связанные уязвимости
A memory leak flaw was found in WildFly OpenSSL in versions prior to 1.1.3.Final, where it removes an HTTP session. It may allow the attacker to cause OOM leading to a denial of service. The highest threat from this vulnerability is to system availability.
A memory leak flaw was found in WildFly OpenSSL in versions prior to 1 ...
Уязвимость библиотеки OpenSSL сервера WildFly, связанная с неконтролируемым расходом ресурсов, позволяющая нарушителю вызвать отказ в обслуживании или получить полный доступ к системе
EPSS
7.5 High
CVSS3
5 Medium
CVSS2