high7.5
CVE-2019-19343
A flaw was found in Undertow when using Remoting as shipped in Red Hat Jboss EAP before version 7.2.4.
Impact
A flaw was found in Undertow when using Remoting as shipped in Red Hat Jboss EAP before version 7.2.4. A memory leak in HttpOpenListener due to holding remote connections indefinitely may lead to denial of service. Versions before undertow 2.0.25.SP1 and jboss-remoting 5.0.14.SP1 are believed to be vulnerable.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Redhat | Jboss-Remoting | before 5.0.14 Version 5.0.14 |
| Redhat | Jboss Enterprise Application Platform | before 7.2.4 |
| Redhat | Undertow | before 2.0.25 Version 2.0.25 |
| Netapp | Active Iq Unified Manager | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://bugzilla.redhat.com/show_bug.cgi?id=1780445
- https://issues.redhat.com/browse/JBEAP-16695
- https://security.netapp.com/advisory/ntap-20220211-0002/
- https://bugzilla.redhat.com/show_bug.cgi?id=1780445
- https://issues.redhat.com/browse/JBEAP-16695
- https://security.netapp.com/advisory/ntap-20220211-0002/