Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-4027

Опубликовано: 30 янв. 2026
Источник: nvd
CVSS3: 7.5
EPSS Низкий

Описание

A flaw was found in Undertow. Servlets using a method that calls HttpServletRequestImpl.getParameterNames() can cause an OutOfMemoryError when the client sends a request with large parameter names. This issue can be exploited by an unauthorized user to cause a remote denial-of-service (DoS) attack.

EPSS

Процентиль: 44%
0.00575
Низкий

7.5 High

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 7.5
ubuntu
6 месяцев назад

A flaw was found in Undertow. Servlets using a method that calls HttpServletRequestImpl.getParameterNames() can cause an OutOfMemoryError when the client sends a request with large parameter names. This issue can be exploited by an unauthorized user to cause a remote denial-of-service (DoS) attack.

CVSS3: 7.5
redhat
6 месяцев назад

A flaw was found in Undertow. Servlets using a method that calls HttpServletRequestImpl.getParameterNames() can cause an OutOfMemoryError when the client sends a request with large parameter names. This issue can be exploited by an unauthorized user to cause a remote denial-of-service (DoS) attack.

CVSS3: 7.5
debian
6 месяцев назад

A flaw was found in Undertow. Servlets using a method that calls HttpS ...

CVSS3: 7.5
github
6 месяцев назад

Undertow Servlets Vulnerable to Remote DoS via OutOfMemoryError when Passed Large Parameter Names

EPSS

Процентиль: 44%
0.00575
Низкий

7.5 High

CVSS3

Дефекты

CWE-20