Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-3884

Опубликовано: 03 дек. 2025
Источник: nvd
CVSS3: 7.5
EPSS Низкий

Описание

A flaw was found in Undertow that can cause remote denial of service attacks. When the server uses the FormEncodedDataDefinition.doParse(StreamSourceChannel) method to parse large form data encoding with application/x-www-form-urlencoded, the method will cause an OutOfMemory issue. This flaw allows unauthorized users to cause a remote denial of service (DoS) attack.

EPSS

Процентиль: 64%
0.00463
Низкий

7.5 High

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 7.5
ubuntu
2 месяца назад

A flaw was found in Undertow that can cause remote denial of service attacks. When the server uses the FormEncodedDataDefinition.doParse(StreamSourceChannel) method to parse large form data encoding with application/x-www-form-urlencoded, the method will cause an OutOfMemory issue. This flaw allows unauthorized users to cause a remote denial of service (DoS) attack.

CVSS3: 7.5
debian
2 месяца назад

A flaw was found in Undertow that can cause remote denial of service a ...

CVSS3: 7.5
github
2 месяца назад

Undertow OutOfMemory when parsing form data encoding with application/x-www-form-urlencoded

EPSS

Процентиль: 64%
0.00463
Низкий

7.5 High

CVSS3

Дефекты

CWE-20