Denial Of Service (DoS)

2020-05-1303:23:35

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

41.0%

JSON

undertow is vulnerable to denial of service (DoS). The vulnerability exists due a memory exhaustion issue in HttpReadListener via “Expect: 100-continue” header.

CPENameOperatorVersion
eap7-hibernate-searcheq5.5.8__1.Final_redhat_1.1.ep7.el6
eap7-hibernate-searcheq5.10.3__1.Final_redhat_00001.1.el6eap
eap7-hibernate-searcheq5.10.3__1.Final_redhat_00001.1.el7eap
eap7-hibernate-searcheq5.5.2__1.Final_redhat_1.1.ep7.el7
eap7-hibernate-searcheq5.10.3__1.Final_redhat_00001.1.el8eap
eap7-hibernate-searcheq5.5.2__1.Final_redhat_1.1.ep7.el6
eap7-hibernate-searcheq5.5.8__1.Final_redhat_1.1.ep7.el7
eap7-hal-consoleeq3.0.11__1.Final_redhat_00001.1.el7eap
eap7-hal-consoleeq3.0.19__1.Final_redhat_00001.1.el6eap
eap7-hal-consoleeq3.0.17__2.Final_redhat_00001.1.el7eap

Name	Operator	Version
eap7-hibernate-search	eq	5.5.8__1.Final_redhat_1.1.ep7.el6
eap7-hibernate-search	eq	5.10.3__1.Final_redhat_00001.1.el6eap
eap7-hibernate-search	eq	5.10.3__1.Final_redhat_00001.1.el7eap
eap7-hibernate-search	eq	5.5.2__1.Final_redhat_1.1.ep7.el7
eap7-hibernate-search	eq	5.10.3__1.Final_redhat_00001.1.el8eap
eap7-hibernate-search	eq	5.5.2__1.Final_redhat_1.1.ep7.el6
eap7-hibernate-search	eq	5.5.8__1.Final_redhat_1.1.ep7.el7
eap7-hal-console	eq	3.0.11__1.Final_redhat_00001.1.el7eap
eap7-hal-console	eq	3.0.19__1.Final_redhat_00001.1.el6eap
eap7-hal-console	eq	3.0.17__2.Final_redhat_00001.1.el7eap