A flaw was found in Undertow when using Remoting as shipped in Red Hat Jboss EAP before version 7.2.4. A memory leak in HttpOpenListener due to holding remote connections indefinitely may lead to denial of service. Versions before undertow 2.0.25.SP1 and jboss-remoting 5.0.14.SP1 are believed to be vulnerable.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
redhat jboss-remoting 5.0.14 |
||
redhat jboss-remoting |
||
redhat undertow 2.0.25 |
||
redhat undertow |
||
redhat jboss enterprise application platform |
||
netapp active iq unified manager - |