medium6.5
CVE-2018-1114
It was found that URLResource.getLastModified() in Undertow closes the file descriptors only when they are finalized which can cause file descriptors to exhaus…
Impact
It was found that URLResource.getLastModified() in Undertow closes the file descriptors only when they are finalized which can cause file descriptors to exhaust. This leads to a file handler leak.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Redhat | Undertow | All versions |
| Redhat | Virtualization | Versions 4.0, 4.2 |
| Redhat | Virtualization Host | Version 4.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://access.redhat.com/errata/RHSA-2018:2643
- https://access.redhat.com/errata/RHSA-2018:2669
- https://access.redhat.com/errata/RHSA-2019:0877
- https://bugs.openjdk.java.net/browse/JDK-6956385
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1114
- https://issues.jboss.org/browse/UNDERTOW-1338
- https://access.redhat.com/errata/RHSA-2018:2643
- https://access.redhat.com/errata/RHSA-2018:2669
- https://access.redhat.com/errata/RHSA-2019:0877
- https://bugs.openjdk.java.net/browse/JDK-6956385
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1114
- https://issues.jboss.org/browse/UNDERTOW-1338