CVE-2020-27822

Опубликовано: 08 дек. 2020

Источник: nvd

CVSS3: 5.9

CVSS2: 7.1

EPSS Низкий

Описание

A flaw was found in Wildfly affecting versions 19.0.0.Final, 19.1.0.Final, 20.0.0.Final, 20.0.1.Final, and 21.0.0.Final. When an application uses the OpenTracing API's java-interceptors, there is a possibility of a memory leak. This flaw allows an attacker to impact the availability of the server. The highest threat from this vulnerability is to system availability.

Ссылки

https://bugzilla.redhat.com/show_bug.cgi?id=1904060
Issue Tracking
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1904060
Issue Tracking
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:redhat:wildfly:19.0.0:*:*:*:*:*:*:*

cpe:2.3:a:redhat:wildfly:19.1.0:*:*:*:*:*:*:*

cpe:2.3:a:redhat:wildfly:20.0.0:*:*:*:*:*:*:*

cpe:2.3:a:redhat:wildfly:20.0.1:*:*:*:*:*:*:*

cpe:2.3:a:redhat:wildfly:21.0.0:*:*:*:*:*:*:*

EPSS

Процентиль: 56%

0.00339

Низкий

5.9 Medium

CVSS3

7.1 High

CVSS2

Дефекты

CWE-401

Связанные уязвимости

CVE-2020-27822

CVSS3: 5.9

redhat

около 5 лет назад

CVE-2020-27822

CVSS3: 5.9

debian

около 5 лет назад

A flaw was found in Wildfly affecting versions 19.0.0.Final, 19.1.0.Fi ...

GHSA-qx3p-9mmp-4v8h

CVSS3: 5.9

github

больше 3 лет назад

Wildfly has a memory leak vulnerability

EPSS

Процентиль: 56%

0.00339

Низкий

5.9 Medium

CVSS3

7.1 High

CVSS2

Дефекты

CWE-401