NetSight
medium4.9

CVE-2022-2764

A flaw was found in Undertow.

Impact

A flaw was found in Undertow. Denial of service can be achieved as Undertow server waits for the LAST_CHUNK forever for EJB invocations.

Affected products

VendorProductAffected versions
RedhatIntegration Camel K
All versions
RedhatJboss Enterprise Application Platform
Version 7.0.0
RedhatJboss Fuse
Version 7.0.0
RedhatSingle Sign-On
Version 7.0
RedhatUndertow
from 2.0.0 through 2.2.19
Version 2.3.0
NetappActive Iq Unified Manager
All versions
NetappCloud Secure Agent
All versions
NetappOncommand Insight
All versions
NetappOncommand Workflow Automation
All versions

Weakness classification

References