Description (CNA)
A flaw was found in Undertow when using Remoting as shipped in Red Hat Jboss EAP before version 7.2.4. A memory leak in HttpOpenListener due to holding remote connections indefinitely may lead to denial of service. Versions before undertow 2.0.25.SP1 and jboss-remoting 5.0.14.SP1 are believed to be vulnerable.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / Undertow | affected undertow 2.0.25.SP1, jboss-remoting 5.0.14.SP1 |
CWE
CWE-400
References
- https://bugzilla.redhat.com/show_bug.cgi?id=1780445
- https://issues.redhat.com/browse/JBEAP-16695
- https://security.netapp.com/advisory/ntap-20220211-0002/
ADP enrichment
No English description supplied.