Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2016-7046

Опубликовано: 15 сент. 2016
Источник: redhat
CVSS3: 6.5
CVSS2: 7.8
EPSS Низкий

Описание

Red Hat JBoss Enterprise Application Platform (EAP) 7, when operating as a reverse-proxy with default buffer sizes, allows remote attackers to cause a denial of service (CPU and disk consumption) via a long URL.

It was discovered that a long URL sent to EAP 7 Server operating as a reverse proxy with default buffer sizes causes a Denial of Service.

Дополнительная информация

Статус:

Important
Дефект:
CWE-119
https://bugzilla.redhat.com/show_bug.cgi?id=1376646undertow: Long URL proxy request lead to java.nio.BufferOverflowException and DoS

EPSS

Процентиль: 88%
0.0406
Низкий

6.5 Medium

CVSS3

7.8 High

CVSS2

Связанные уязвимости

CVSS3: 5.9
ubuntu
больше 9 лет назад

Red Hat JBoss Enterprise Application Platform (EAP) 7, when operating as a reverse-proxy with default buffer sizes, allows remote attackers to cause a denial of service (CPU and disk consumption) via a long URL.

CVSS3: 5.9
nvd
больше 9 лет назад

Red Hat JBoss Enterprise Application Platform (EAP) 7, when operating as a reverse-proxy with default buffer sizes, allows remote attackers to cause a denial of service (CPU and disk consumption) via a long URL.

CVSS3: 5.9
debian
больше 9 лет назад

Red Hat JBoss Enterprise Application Platform (EAP) 7, when operating ...

CVSS3: 5.9
github
больше 3 лет назад

Undertow Uncaught Exception vulnerability

EPSS

Процентиль: 88%
0.0406
Низкий

6.5 Medium

CVSS3

7.8 High

CVSS2