Published: 23/03/2021 Updated: 03/05/2022

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 445

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

A flaw was found in Undertow when using Remoting as shipped in Red Hat Jboss EAP before version 7.2.4. A memory leak in HttpOpenListener due to holding remote connections indefinitely may lead to denial of service. Versions before undertow 2.0.25.SP1 and jboss-remoting 5.0.14.SP1 are believed to be vulnerable.

Vulnerable Product	Search on Vulmon	Subscribe to Product
redhat jboss-remoting 5.0.14
redhat jboss-remoting
redhat undertow 2.0.25
redhat undertow
redhat jboss enterprise application platform
netapp active iq unified manager -

Debian Bug report logs - #948024 undertow: CVE-2019-19343 Package: src:undertow; Maintainer for src:undertow is Debian Java Maintainers <pkg-java-maintainers@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Fri, 3 Jan 2020 12:39:01 UTC Severity: important Tags: security, upstream ...

Synopsis Important: EAP Continuous Delivery Technical Preview Release 18 security update Type/Severity Security Advisory: Important Topic This is a security update for JBoss EAP Continuous Delivery 180Red Hat Product Security has rated this update as having a security impact of Important A Common Vulnera ...

Synopsis Important: Red Hat Fuse 780 release and security update Type/Severity Security Advisory: Important Topic A minor version update (from 77 to 78) is now available for Red Hat Fuse The purpose of this text-only errata is to inform you about the security issues fixed in this releaseRed Hat Produc ...

CWE-404 https://issues.redhat.com/browse/JBEAP-16695 https://bugzilla.redhat.com/show_bug.cgi?id=1780445 https://security.netapp.com/advisory/ntap-20220211-0002/https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=948024 https://nvd.nist.gov

CVE-2019-19343

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect