CVE-2016-9589

2018-03-1215:29:00

Google

osv.dev

0.011 Low

EPSS

Percentile

84.2%

JSON

Undertow in Red Hat wildfly before version 11.0.0.Beta1 is vulnerable to a resource exhaustion resulting in a denial of service. Undertow keeps a cache of seen HTTP headers in persistent connections. It was found that this cache can easily exploited to fill memory with garbage, up to “max-headers” (default 200) * “max-header-size” (default 1MB) per active TCP connection.

CPENameOperatorVersion
wildflyeq10.0.0.CR1
wildflyeq7.1.0.Final-prerelease2
wildflyeq7.1.1.Final
wildflyeq10.0.0.Final
wildflyeq9.0.0.Beta2
wildflyeq7.1.2-prerelease
wildflyeq7.0.0.Alpha1-final
wildflyeq7.0.0.Final-prerelease2
wildflyeq10.0.0.Beta1
wildflyeq7.0.0.Beta2

Name	Operator	Version
wildfly	eq	10.0.0.CR1
wildfly	eq	7.1.0.Final-prerelease2
wildfly	eq	7.1.1.Final
wildfly	eq	10.0.0.Final
wildfly	eq	9.0.0.Beta2
wildfly	eq	7.1.2-prerelease
wildfly	eq	7.0.0.Alpha1-final
wildfly	eq	7.0.0.Final-prerelease2
wildfly	eq	10.0.0.Beta1
wildfly	eq	7.0.0.Beta2