Security
فارسی
All products

Red Hat Fuse 7/undertow

Red Hat · Package
12 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Undertow OutOfMemory when parsing form data encoding with application/x-www-form-urlencodedCVE-2024-3884 · GHSA-6H4F-PJ3G-Q8FQ io.undertow:undertow-coreRed Hat Fuse 7/undertow MavenRed Hat High Fix reported
HTTP/2 Stream Cancellation AttackCVE-2023-44487 · GHSA-QPPJ-FM5R-HXR3 golang.org/x/netcom.typesafe.akka:akka-http-core GoMavenRed HatSwift Medium Fix reported
Undertow's url-encoded request path information can be broken on ajp-listenerCVE-2024-6162 · GHSA-9442-GM4V-R222 io.undertow:undertow-coreRed Hat Fuse 7/undertow MavenRed Hat High Fix reported
Undertow Servlets Vulnerable to Remote DoS via OutOfMemoryError when Passed Large Parameter NamesCVE-2024-4027 · GHSA-33HJ-RCMX-86MV io.undertow:undertow-coreRed Hat Fuse 7/undertow MavenRed Hat High Fix reported
Undertow vulnerable to Race ConditionCVE-2024-7885 · GHSA-9623-MQMM-5RCF io.undertow:undertow-coreRed Hat Build of Keycloak/undertow MavenRed Hat High Fix reported
Undertow Path Traversal vulnerabilityCVE-2024-1459 · GHSA-V76W-3PH8-VM66 io.undertow:undertow-coreRed Hat Data Grid 8/undertow MavenRed Hat Medium Fix reported
Undertow Missing Release of Memory after Effective Lifetime vulnerabilityCVE-2024-3653 · GHSA-CH7Q-GPFF-H9HP io.undertow:undertow-coreOpenShift Serverless/undertow MavenRed Hat Medium Fix reported
Undertow Denial of Service vulnerabilityCVE-2024-5971 · GHSA-XPP6-8R3J-WW43 io.undertow:undertow-coreRed Hat Fuse 7/undertow MavenRed Hat High Fix reported
Potential to access user credentials from the log files when debug logging enabledCVE-2019-10212 · GHSA-8VH8-VC28-M2HF io.undertow:undertow-coreRed Hat Fuse 7/undertow MavenRed Hat Critical Fix reported
Improper Input Validation in org.wildfly:wildfly-undertowCVE-2018-1047 · GHSA-FMR4-W67P-VH8X org.wildfly:wildfly-undertowJBoss Developer Studio 10/wildfly-undertow MavenRed Hat Medium Fix reported
Undertow: DoS can be achieved as Undertow server waits for the LAST_CHUNK forever for EJB invocationsCVE-2022-2764 Red Hat Data Grid 8/undertowRed Hat Fuse 7/undertow Red Hat Low No fix reported
undertow: AJP Request closes connection exceeding maxRequestSizeCVE-2023-5379 Red Hat Decision Manager 7/undertowRed Hat Fuse 7/undertow Red Hat Medium No fix reported