NetSight
high7.5

CVE-2020-10705

A flaw was discovered in Undertow in versions before Undertow 2.1.1.Final where certain requests to the "Expect: 100-continue" header may cause an out of memor…

Impact

A flaw was discovered in Undertow in versions before Undertow 2.1.1.Final where certain requests to the "Expect: 100-continue" header may cause an out of memory error. This flaw may potentially lead to a denial of service.

Affected products

VendorProductAffected versions
RedhatUndertow
before 2.1.1
NetappOncommand Insight
All versions
RedhatJboss Enterprise Application Platform
All versions
Version 7.2
RedhatOpenshift Application Runtimes
All versions

Weakness classification

References