← CVE Intelligence

CVE-2023-1108

Undertow: infinite loop in sslconduit during close PUBLISHED

Description (CNA)

A flaw was found in undertow. This issue makes achieving a denial of service possible due to an unexpected handshake status updated in SslConduit, where the loop never terminates.

Affected (CNA)

Vendor / productVersions
Not supplied / Not suppliedunaffected 2.3.5; unaffected 2.2.24
Red Hat / EAP 7.4.10 releaseunaffected
Red Hat / Red Hat Fuse 7.12unaffected
Red Hat / Red Hat JBoss Enterprise Application Platform 7.1.0unaffected
Red Hat / Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8unaffected 0:2.2.22-1.SP3_redhat_00002.1.el8eap before *
Red Hat / Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8unaffected 0:7.4.9-6.GA_redhat_00004.1.el8eap before *
Red Hat / Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8unaffected 0:2.2.23-1.SP2_redhat_00001.1.el8eap before *
Red Hat / Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8unaffected 0:2.0.14-1.Final_redhat_00001.1.el8eap before *
Red Hat / Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9unaffected 0:2.2.22-1.SP3_redhat_00002.1.el9eap before *
Red Hat / Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9unaffected 0:7.4.9-6.GA_redhat_00004.1.el9eap before *
Red Hat / Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9unaffected 0:2.2.23-1.SP2_redhat_00001.1.el9eap before *
Red Hat / Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9unaffected 0:2.0.14-1.Final_redhat_00001.1.el9eap before *
Red Hat / Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7unaffected 0:2.2.22-1.SP3_redhat_00002.1.el7eap before *
Red Hat / Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7unaffected 0:7.4.9-6.GA_redhat_00004.1.el7eap before *
Red Hat / Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7unaffected 0:2.2.23-1.SP2_redhat_00001.1.el7eap before *
Red Hat / Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7unaffected 0:2.0.14-1.Final_redhat_00001.1.el7eap before *
Red Hat / Red Hat Single Sign-On 7unaffected
Red Hat / Red Hat Single Sign-On 7.6 for RHEL 7unaffected 0:18.0.8-1.redhat_00001.1.el7sso before *
Red Hat / Red Hat Single Sign-On 7.6 for RHEL 8unaffected 0:18.0.8-1.redhat_00001.1.el8sso before *
Red Hat / Red Hat Single Sign-On 7.6 for RHEL 9unaffected 0:18.0.8-1.redhat_00001.1.el9sso before *
Red Hat / Red Hat support for Spring Boot 2.7.13unaffected
Red Hat / RHEL-8 based Middleware Containersunaffected 7.6-24 before *
Red Hat / RHPAM 7.13.1 asyncunaffected
Red Hat / Red Hat build of Quarkusunaffected
Red Hat / Red Hat Data Grid 8unaffected
Red Hat / Red Hat Integration Camel Kaffected
Red Hat / Red Hat Integration Camel Quarkusunaffected
Red Hat / Red Hat Integration Service Registryaffected
Red Hat / Red Hat JBoss Data Grid 7unknown
Red Hat / Red Hat JBoss Enterprise Application Platform Expansion Packaffected
Red Hat / Red Hat JBoss Fuse 6unknown
Red Hat / Red Hat OpenStack Platform 13 (Queens)affected

CWE

CWE-835

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.