Denial Of Service (DoS)

2019-05-0205:28:26

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.023 Low

EPSS

Percentile

89.7%

JSON

HTTPS NIO Connector is vulnerable to Denial Of Service (DoS) attacks. The component Socket Handler’s functionality is affected by opening a socket and not sending an SSL handshake which results in a read-timeout vulnerability.

CPENameOperatorVersion
jboss-as-client-alleq7.5.1__2.Final_redhat_3.1.ep6.el6
jboss-as-client-alleq7.4.1__2.Final_redhat_3.1.ep6.el6
jboss-as-client-alleq7.4.2__3.Final_redhat_2.1.ep6.el7
jboss-as-client-alleq7.5.4__2.Final_redhat_4.1.ep6.el5
jboss-as-client-alleq7.3.2__2.Final_redhat_2.1.ep6.el5
jboss-as-client-alleq7.3.1__4.Final_redhat_3.1.ep6.el6
jboss-as-client-alleq7.3.2__2.Final_redhat_2.1.ep6.el6
jboss-as-client-alleq7.2.0__8.Final_redhat_8.ep6.el6
jboss-as-client-alleq7.5.3__1.Final_redhat_2.1.ep6.el6
jboss-as-client-alleq7.4.1__2.Final_redhat_3.1.ep6.el7

Name	Operator	Version
jboss-as-client-all	eq	7.5.1__2.Final_redhat_3.1.ep6.el6
jboss-as-client-all	eq	7.4.1__2.Final_redhat_3.1.ep6.el6
jboss-as-client-all	eq	7.4.2__3.Final_redhat_2.1.ep6.el7
jboss-as-client-all	eq	7.5.4__2.Final_redhat_4.1.ep6.el5
jboss-as-client-all	eq	7.3.2__2.Final_redhat_2.1.ep6.el5
jboss-as-client-all	eq	7.3.1__4.Final_redhat_3.1.ep6.el6
jboss-as-client-all	eq	7.3.2__2.Final_redhat_2.1.ep6.el6
jboss-as-client-all	eq	7.2.0__8.Final_redhat_8.ep6.el6
jboss-as-client-all	eq	7.5.3__1.Final_redhat_2.1.ep6.el6
jboss-as-client-all	eq	7.4.1__2.Final_redhat_3.1.ep6.el7