Описание
A flaw was found in Undertow when using Remoting as shipped in Red Hat Jboss EAP before version 7.2.4. A memory leak in HttpOpenListener due to holding remote connections indefinitely may lead to denial of service. Versions before undertow 2.0.25.SP1 and jboss-remoting 5.0.14.SP1 are believed to be vulnerable.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Decision Manager 7 | undertow | Not affected | ||
| Red Hat JBoss Data Grid 7 | undertow | Not affected | ||
| Red Hat JBoss Enterprise Application Platform 7 | undertow | Affected | ||
| Red Hat JBoss Fuse 6 | undertow | Out of support scope | ||
| Red Hat OpenShift Application Runtimes | undertow | Out of support scope | ||
| Red Hat Process Automation 7 | undertow | Not affected | ||
| Red Hat Single Sign-On 7 | undertow | Not affected | ||
| Red Hat Fuse 7.8.0 | undertow | Fixed | RHSA-2020:5568 | 16.12.2020 |
| Red Hat JBoss EAP 7.2 | Fixed | RHSA-2019:2938 | 30.09.2019 | |
| Red Hat JBoss Enterprise Application Platform Continuous Delivery | undertow | Fixed | RHSA-2020:2565 | 15.06.2020 |
Показывать по
Дополнительная информация
Статус:
5.9 Medium
CVSS3
Связанные уязвимости
A flaw was found in Undertow when using Remoting as shipped in Red Hat Jboss EAP before version 7.2.4. A memory leak in HttpOpenListener due to holding remote connections indefinitely may lead to denial of service. Versions before undertow 2.0.25.SP1 and jboss-remoting 5.0.14.SP1 are believed to be vulnerable.
A flaw was found in Undertow when using Remoting as shipped in Red Hat Jboss EAP before version 7.2.4. A memory leak in HttpOpenListener due to holding remote connections indefinitely may lead to denial of service. Versions before undertow 2.0.25.SP1 and jboss-remoting 5.0.14.SP1 are believed to be vulnerable.
A flaw was found in Undertow when using Remoting as shipped in Red Hat ...
A flaw was found in Undertow when using Remoting as shipped in Red Hat Jboss EAP before version 7.2.4. A memory leak in HttpOpenListener due to holding remote connections indefinitely may lead to denial of service. Versions before undertow 2.0.25.SP1 and jboss-remoting 5.0.14.SP1 are believed to be vulnerable.
5.9 Medium
CVSS3