Security
فارسی
All products

Red Hat OpenShift Application Runtimes/undertow

Red Hat · Package
21 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Undertow Uncontrolled Resource ConsumptionCVE-2021-3629 · GHSA-RF6Q-VX79-MJXR io.undertow:undertow-coreRed Hat Integration Camel K 1/undertow MavenRed Hat High Fix reported
golang.org/x/net/http vulnerable to a reset floodCVE-2019-9514 · GHSA-39QC-96H7-956F golang.org/x/netRed Hat AMQ Broker 7/jetty GoRed Hat High Fix reported
golang.org/x/net/http vulnerable to ping floodsCVE-2019-9512 · GHSA-HGR8-6H9X-F7Q9 golang.org/x/netRed Hat AMQ Broker 7/jetty GoRed Hat High Fix reported
Undertow vulnerable to Uncontrolled Resource ConsumptionCVE-2019-14888 · GHSA-VJXC-FRW4-JMH5 io.undertow:undertow-coreRed Hat JBoss Fuse 6/undertow MavenRed Hat High Fix reported
Undertow Missing Authorization when requesting a protected directory without trailing slashCVE-2019-10184 · GHSA-W69W-JVC7-WJGV io.undertow:undertow-servletRed Hat JBoss Enterprise Application Platform 6/jbossweb MavenRed Hat High Fix reported
Improper Authorization in UndertoeCVE-2020-1745 · GHSA-GV2W-88HX-8M9R io.undertow:undertow-coreRed Hat JBoss Fuse 6/undertow MavenRed Hat High Fix reported
Allocation of Resources Without Limits or Throttling in UndertowCVE-2020-10705 · GHSA-G4CP-H53P-V3V8 io.undertow:undertow-coreRed Hat OpenShift Application Runtimes/undertow MavenRed Hat High Fix reported
HTTP Request Smuggling in UndertowCVE-2020-10719 · GHSA-CCCF-7XW3-P2VR io.undertow:undertow-coreRed Hat JBoss Data Grid 7/undertow MavenRed Hat Medium Fix reported
undertow Race Condition vulnerabilityCVE-2021-3597 · GHSA-MFHV-GWF8-4M88 io.undertow:undertow-coreRed Hat JBoss Data Grid 7/undertow MavenRed Hat Medium Fix reported
Credential exposure through log files in UndertowCVE-2019-3888 · GHSA-JWGX-9MMH-684W io.undertow:undertow-coreRed Hat JBoss Fuse 6/undertow MavenRed Hat Critical Fix reported
Potential to access user credentials from the log files when debug logging enabledCVE-2019-10212 · GHSA-8VH8-VC28-M2HF io.undertow:undertow-coreRed Hat Fuse 7/undertow MavenRed Hat Critical Fix reported
Denial of service in UndertowCVE-2020-27782 · GHSA-RHCW-WJCM-9H6G io.undertow:undertow-coreRed Hat Integration Camel K 1/undertow MavenRed Hat High Fix reported
Improper Input Validation in UndertowCVE-2020-1757 · GHSA-2W73-FQQJ-C92P io.undertow:undertow-coreRed Hat JBoss Enterprise Application Platform 6/undertow MavenRed Hat High Fix reported
Exposure of Sensitive Information to an Unauthorized Actor in UndertowCVE-2018-14642 · GHSA-VF6R-MMHC-3XCM io.undertow:undertow-coreRed Hat JBoss Enterprise Application Platform 6/jbossweb MavenRed Hat Medium Fix reported
Uncontrolled Resource Consumption in UndertowCVE-2018-1114 · GHSA-GJJX-GQM4-WCGM io.undertow:undertow-coreRed Hat JBoss Fuse 6/undertow MavenRed Hat Medium Fix reported
Improper Input Validation in org.wildfly:wildfly-undertowCVE-2018-1047 · GHSA-FMR4-W67P-VH8X org.wildfly:wildfly-undertowJBoss Developer Studio 10/wildfly-undertow MavenRed Hat Medium Fix reported
Improper Neutralization of CRLF Sequences in HTTP Headers in UndertowCVE-2018-1067 · GHSA-47MP-RQ2X-WJF2 org.jboss.eap:wildfly-undertowRed Hat JBoss BRMS 5/jbossweb MavenRed Hat Medium Fix reported
HTTP/2: large amount of data requests leads to denial of serviceCVE-2019-9511 Red Hat 3scale API Management Platform 2/nginxRed Hat AMQ Broker 7/jetty Red Hat High No fix reported
HTTP/2: flood using SETTINGS frames results in unbounded memory growthCVE-2019-9515 Red Hat AMQ Broker 7/jettyRed Hat AMQ Broker 7/netty Red Hat High No fix reported
Undertow: Memory Leak in Undertow HttpOpenListener due to holding remoting connections indefinitelyCVE-2019-19343 Red Hat JBoss Enterprise Application Platform 7/undertowRed Hat JBoss Fuse 6/undertow Red Hat Medium No fix reported