Lucene search

K
osvGoogleOSV:GHSA-37G7-8VJJ-PJPJ
HistoryMar 18, 2022 - 5:58 p.m.

RESTEasy 4.5.5.Final in hash flooding

2022-03-1817:58:59
Google
osv.dev
19
resteasy
rootnode
caching
vulnerability
hash flooding
denial of service
software

EPSS

0.001

Percentile

40.9%

A vulnerability was found in RESTEasy, where RootNode incorrectly caches routes. This issue results in hash flooding, leading to slower requests with higher CPU time spent searching and adding the entry. This flaw allows an attacker to cause a denial of service.

EPSS

0.001

Percentile

40.9%