medium6.5
CVE-2020-25689
Uncontrolled Resource Consumption in WildFly
Impact
A memory leak flaw was found in WildFly in all versions up to 21.0.0.Final, where host-controller tries to reconnect in a loop, generating new connections which are not properly closed while not able to connect to domain-controller. This flaw allows an attacker to cause an Out of memory (OOM) issue, leading to a denial of service. The highest threat from this vulnerability is to system availability.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | org.wildfly:wildfly-dist | <= 21.0.0 | 21.0.1 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Redhat | Wildfly | through 21.0.0 |
| Redhat | Fuse | Version 6.0.0 |
| Redhat | Jboss Data Grid | Version 7.0.0 |
| Redhat | Jboss Enterprise Application Platform | Version 7.0.0 |
| Redhat | Jboss Fuse | Version 7.0.0 |
| Redhat | Openshift Application Runtimes | All versions |
| Redhat | Single Sign-On | Version 7.0 |
| Netapp | Active Iq Unified Manager | All versions |
| Netapp | Oncommand Insight | All versions |
| Netapp | Service Level Manager | All versions |