Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2016-9589
HistoryMar 12, 2018 - 3:29 p.m.

CVE-2016-9589

2018-03-1215:29:00
CWE-400
[email protected]
web.nvd.nist.gov
192
undertow
red hat
wildfly
denial of service
resource exhaustion
cve-2016-9589
nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.2 High

AI Score

Confidence

High

0.011 Low

EPSS

Percentile

84.2%

JSON

Undertow in Red Hat wildfly before version 11.0.0.Beta1 is vulnerable to a resource exhaustion resulting in a denial of service. Undertow keeps a cache of seen HTTP headers in persistent connections. It was found that this cache can easily exploited to fill memory with garbage, up to “max-headers” (default 200) * “max-header-size” (default 1MB) per active TCP connection.

Affected configurations

Vulners
NVD
Node
red_hat\,_inc.wildflyRange≤11.0.0

CNA Affected

[
  {
    "product": "wildfly",
    "vendor": "Red Hat, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "11.0.0.Beta1"
      }
    ]
  }
]

Related

veracode 1
nvd 1
redhat 11
github 1
osv 2
prion 1
redhatcve 1
cvelist 1
nessus 8
veracode
veracode
Denial Of Service (DoS)
2018-01-15 06:04:20
nvd
nvd
CVE-2016-9589
2018-03-12 15:29:00
redhat
redhat
(RHSA-2017:0830) Moderate: Red Hat JBoss Enterprise Application Platform security update
2017-03-22 17:18:08
(RHSA-2017:0834) Important: jboss-ec2-eap package for EAP 7.0.5
2017-03-22 17:55:27
(RHSA-2017:0832) Important: JBoss Enterprise Application Platform 7.0.5 on RHEL 7
2017-03-22 17:40:35
github
github
Red Hat Wildfly DoS
2022-05-13 01:38:28
osv
osv
Red Hat Wildfly DoS
2022-05-13 01:38:28
CVE-2016-9589
2018-03-12 15:29:00
prion
prion
Design/Logic Flaw
2018-03-12 15:29:00
redhatcve
redhatcve
CVE-2016-9589
2019-10-08 03:39:37
cvelist
cvelist
CVE-2016-9589
2018-03-12 15:00:00
nessus
nessus
RHEL 6 : JBoss EAP (RHSA-2017:0831)
2018-09-04 00:00:00
RHEL 6 / 7 : JBoss EAP (RHSA-2017:0834)
2018-09-04 00:00:00
RHEL 7 : JBoss EAP (RHSA-2017:0832)
2018-09-04 00:00:00

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.2 High

AI Score

Confidence

High

0.011 Low

EPSS

Percentile

84.2%

JSON
Related for CVE-2016-9589
veracode1nvd1redhat11github1osv2prion1redhatcve1cvelist1nessus8