Lucene search
Veracode Vulnerability DatabaseVERACODE:12225HistoryJan 15, 2019 - 9:14 a.m.
Denial Of Service (DoS)
2019-01-1509:14:29
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
0.039 Low
EPSS
Percentile
92.0%
undertow-core is vulnerable to denial of service attacks. The vulnerability exists when a GET request with very long URL (about 1900 characters) which exceeds the default buffer sizes is sent to the proxy server, it consumes 100% CPU and fills the disk space by generating logs very fast with an infinite loop.
References
access.redhat.com/documentation/en/red-hat-jboss-enterprise-application-platform/?version=7.0/
access.redhat.com/documentation/en/red-hat-jboss-enterprise-application-platform/version-7.0/703-release-notes/
access.redhat.com/security/updates/classification/#important
issues.jboss.org/browse/JBEAP-5590
rhn.redhat.com/errata/RHSA-2016-2640.html
Related
redhat
redhat
nessus
nessus
RHEL 7 : JBoss EAP (RHSA-2016:2641)
2018-09-04 00:00:00
RHEL 6 : JBoss EAP (RHSA-2016:2640)
2018-09-04 00:00:00
RHEL 6 / 7 : JBoss EAP (RHSA-2016:2642)
2018-09-04 00:00:00
osv
osv
Undertow Uncaught Exception vulnerability
2022-05-17 00:15:06
prion
prion
Design/Logic Flaw
2016-10-03 21:59:00
debiancve
debiancve
CVE-2016-7046
2016-10-03 21:59:07
ubuntucve
ubuntucve
CVE-2016-7046
2016-10-03 00:00:00
nvd
nvd
CVE-2016-7046
2016-10-03 21:59:07
github
github
Undertow Uncaught Exception vulnerability
2022-05-17 00:15:06
cvelist
cvelist
CVE-2016-7046
2016-10-03 21:00:00
cve
cve
CVE-2016-7046
2016-10-03 21:59:07