CVE-2024-1635
High · 7.5CVSS
7.5
EPSS
4.6%
Published
Feb 19, 2024
CISA due date
—
Cloudanix analysis
Attackers can crash a server by repeatedly opening and quickly closing connections, eventually using up all available memory and connection slots.
- Exploitation
- Remote Unauthenticated
- Attacker needs
- None
- Complexity
- Low
- Impact
- Denial Of Service
- Component
- Library
- Class
- Denial of service
- Remediation
- Upgrade
- Effort
- Medium
- Patch risk
- Low
What it actually does
Connection leak in Undertow WriteTimeoutStreamSinkConduit during HTTP upgrade to remoting when RemotingConnection closes without notifying the outer layer, causing timeout tasks to retain references to connections and exhaust memory plus file descriptors via XNIO WorkerThread.
Why it matters to the business
Repeated connection churn can exhaust server resources leading to denial of service, application downtime, and operational disruption for services relying on Undertow-based remoting.
How an attack unfolds
An attacker repeatedly opens an HTTP connection to a server supporting wildfly-http-client, triggers the upgrade to remoting, then immediately closes the connection; the leak in WriteTimeoutStreamSinkConduit accumulates unclosed conduits and associated objects until memory or file limits are reached.
How to fix it
Upgrade Undertow to a version containing the fix for the WriteTimeoutStreamSinkConduit leak; monitor and tune XNIO worker thread and connection timeout settings until patches are applied.
How to confirm the fix worked
Review release notes or source for conduit cleanup on Remoting ServerConnectionOpenListener close events; perform load testing with rapid connect/disconnect cycles and verify stable memory and file descriptor counts.
Typical attack path
- Establish TCP connection to the HTTP listener
- Send upgrade request to remoting protocol
- Abruptly close the connection before full handshake completion
- Repeat at high frequency to accelerate resource exhaustion
How to detect it
Correlate web server access logs with OS-level metrics for sustained increases in open file descriptors or resident memory; inspect thread dumps for growing numbers of WriteTimeoutStreamSinkConduit and timeout task objects retained by WorkerThread.
What your security team should do
- Prioritize patching Undertow in all exposed remoting endpoints
- Implement connection rate limiting at the network or load-balancer layer
- Configure alerts for sudden spikes in open file descriptors or heap usage
- Review and reduce unnecessary wildfly-http-client exposure
The record
A vulnerability was found in Undertow. This vulnerability impacts a server that supports the wildfly-http-client protocol. Whenever a malicious user opens and closes a connection with the HTTP port of the server and then closes the connection immediately, the server will end with both memory and open file limits exhausted at some point, depending on the amount of memory available. At HTTP upgrade to remoting, the WriteTimeoutStreamSinkConduit leaks connections if RemotingConnection is closed by Remoting ServerConnectionOpenListener. Because the remoting connection originates in Undertow as part of the HTTP upgrade, there is an external layer to the remoting connection. This connection is unaware of the outermost layer when closing the connection during the connection opening procedure. Hence, the Undertow WriteTimeoutStreamSinkConduit is not notified of the closed connection in this scenario. Because WriteTimeoutStreamSinkConduit creates a timeout task, the whole dependency tree leaks via that task, which is added to XNIO WorkerThread. So, the workerThread points to the Undertow conduit, which contains the connections and causes the leak.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Maven | io.undertow:undertow-core | 0 | 2.2.31.Final |
| Maven | io.undertow:undertow-core | 2.3.0.Final | 2.3.12.Final |
| Debian:13 | undertow | 0 | 2.3.18-1 |
| Red Hat:jboss_enterprise_application_platform:7.4::el7 | eap7-activemq-artemis | 0 | 0:2.16.0-18.redhat_00052.1.el7eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el7 | eap7-activemq-artemis-cli | 0 | 0:2.16.0-18.redhat_00052.1.el7eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el7 | eap7-activemq-artemis-commons | 0 | 0:2.16.0-18.redhat_00052.1.el7eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el7 | eap7-activemq-artemis-core-client | 0 | 0:2.16.0-18.redhat_00052.1.el7eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el7 | eap7-activemq-artemis-dto | 0 | 0:2.16.0-18.redhat_00052.1.el7eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el7 | eap7-activemq-artemis-hornetq-protocol | 0 | 0:2.16.0-18.redhat_00052.1.el7eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el7 | eap7-activemq-artemis-hqclient-protocol | 0 | 0:2.16.0-18.redhat_00052.1.el7eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el7 | eap7-activemq-artemis-jdbc-store | 0 | 0:2.16.0-18.redhat_00052.1.el7eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el7 | eap7-activemq-artemis-jms-client | 0 | 0:2.16.0-18.redhat_00052.1.el7eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el7 | eap7-activemq-artemis-jms-server | 0 | 0:2.16.0-18.redhat_00052.1.el7eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el7 | eap7-activemq-artemis-journal | 0 | 0:2.16.0-18.redhat_00052.1.el7eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el7 | eap7-activemq-artemis-ra | 0 | 0:2.16.0-18.redhat_00052.1.el7eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el7 | eap7-activemq-artemis-selector | 0 | 0:2.16.0-18.redhat_00052.1.el7eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el7 | eap7-activemq-artemis-server | 0 | 0:2.16.0-18.redhat_00052.1.el7eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el7 | eap7-activemq-artemis-service-extensions | 0 | 0:2.16.0-18.redhat_00052.1.el7eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el7 | eap7-activemq-artemis-tools | 0 | 0:2.16.0-18.redhat_00052.1.el7eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el7 | eap7-apache-cxf | 0 | 0:3.4.10-2.redhat_00001.1.el7eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el7 | eap7-apache-cxf-rt | 0 | 0:3.4.10-2.redhat_00001.1.el7eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el7 | eap7-apache-cxf-services | 0 | 0:3.4.10-2.redhat_00001.1.el7eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el7 | eap7-apache-cxf-tools | 0 | 0:3.4.10-2.redhat_00001.1.el7eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el7 | eap7-eclipse-jgit | 0 | 0:5.13.3.202401111512-1.r_redhat_00001.1.el7eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el7 | eap7-elytron-web | 0 | 0:1.9.4-1.Final_redhat_00001.1.el7eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el7 | eap7-hal-console | 0 | 0:3.3.21-1.Final_redhat_00001.1.el7eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el7 | eap7-hibernate | 0 | 0:5.3.36-1.Final_redhat_00001.1.el7eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el7 | eap7-hibernate-core | 0 | 0:5.3.36-1.Final_redhat_00001.1.el7eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el7 | eap7-hibernate-entitymanager | 0 | 0:5.3.36-1.Final_redhat_00001.1.el7eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el7 | eap7-hibernate-envers | 0 | 0:5.3.36-1.Final_redhat_00001.1.el7eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el7 | eap7-hibernate-java8 | 0 | 0:5.3.36-1.Final_redhat_00001.1.el7eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el7 | eap7-infinispan | 0 | 0:11.0.18-2.Final_redhat_00001.1.el7eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el7 | eap7-infinispan-cachestore-jdbc | 0 | 0:11.0.18-2.Final_redhat_00001.1.el7eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el7 | eap7-infinispan-cachestore-remote | 0 | 0:11.0.18-2.Final_redhat_00001.1.el7eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el7 | eap7-infinispan-client-hotrod | 0 | 0:11.0.18-2.Final_redhat_00001.1.el7eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el7 | eap7-infinispan-commons | 0 | 0:11.0.18-2.Final_redhat_00001.1.el7eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el7 | eap7-infinispan-component-annotations | 0 | 0:11.0.18-2.Final_redhat_00001.1.el7eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el7 | eap7-infinispan-core | 0 | 0:11.0.18-2.Final_redhat_00001.1.el7eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el7 | eap7-infinispan-hibernate-cache-commons | 0 | 0:11.0.18-2.Final_redhat_00001.1.el7eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el7 | eap7-infinispan-hibernate-cache-spi | 0 | 0:11.0.18-2.Final_redhat_00001.1.el7eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el7 | eap7-infinispan-hibernate-cache-v53 | 0 | 0:11.0.18-2.Final_redhat_00001.1.el7eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el7 | eap7-insights-java-client | 0 | 0:1.1.2-1.redhat_00001.1.el7eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el7 | eap7-jberet | 0 | 0:1.3.9-3.SP3_redhat_00001.1.el7eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el7 | eap7-jberet-core | 0 | 0:1.3.9-3.SP3_redhat_00001.1.el7eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el7 | eap7-jboss-annotations-api_1.3_spec | 0 | 0:2.0.1-3.Final_redhat_00001.1.el7eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el7 | eap7-jboss-cert-helper | 0 | 0:1.1.2-1.redhat_00001.1.el7eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el7 | eap7-jboss-cert-helper-debuginfo | 0 | 0:1.1.2-1.redhat_00001.1.el7eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el7 | eap7-jboss-remoting | 0 | 0:5.0.27-4.SP2_redhat_00001.1.el7eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el7 | eap7-jboss-server-migration | 0 | 0:1.10.0-35.Final_redhat_00034.1.el7eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el7 | eap7-jboss-server-migration-cli | 0 | 0:1.10.0-35.Final_redhat_00034.1.el7eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el7 | eap7-jboss-server-migration-core | 0 | 0:1.10.0-35.Final_redhat_00034.1.el7eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el7 | eap7-jboss-xnio-base | 0 | 0:3.8.12-1.SP2_redhat_00001.1.el7eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el7 | eap7-jgroups-kubernetes | 0 | 0:1.0.17-1.Final_redhat_00001.1.el7eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el7 | eap7-lucene-analyzers-common | 0 | 0:5.5.5-6.redhat_2.1.el7eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el7 | eap7-lucene-backward-codecs | 0 | 0:5.5.5-6.redhat_2.1.el7eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el7 | eap7-lucene-core | 0 | 0:5.5.5-6.redhat_2.1.el7eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el7 | eap7-lucene-facet | 0 | 0:5.5.5-6.redhat_2.1.el7eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el7 | eap7-lucene-misc | 0 | 0:5.5.5-6.redhat_2.1.el7eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el7 | eap7-lucene-queries | 0 | 0:5.5.5-6.redhat_2.1.el7eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el7 | eap7-lucene-queryparser | 0 | 0:5.5.5-6.redhat_2.1.el7eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el7 | eap7-lucene-solr | 0 | 0:5.5.5-6.redhat_2.1.el7eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el7 | eap7-undertow | 0 | 0:2.2.30-1.SP1_redhat_00001.1.el7eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el7 | eap7-undertow-server | 0 | 0:1.9.4-1.Final_redhat_00001.1.el7eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el7 | eap7-wildfly | 0 | 0:7.4.16-4.GA_redhat_00002.1.el7eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el7 | eap7-wildfly-elytron | 0 | 0:1.15.22-1.Final_redhat_00001.1.el7eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el7 | eap7-wildfly-elytron-tool | 0 | 0:1.15.22-1.Final_redhat_00001.1.el7eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el7 | eap7-wildfly-java-jdk11 | 0 | 0:7.4.16-4.GA_redhat_00002.1.el7eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el7 | eap7-wildfly-java-jdk8 | 0 | 0:7.4.16-4.GA_redhat_00002.1.el7eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el7 | eap7-wildfly-javadocs | 0 | 0:7.4.16-4.GA_redhat_00002.1.el7eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el7 | eap7-wildfly-modules | 0 | 0:7.4.16-4.GA_redhat_00002.1.el7eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el8 | eap7-activemq-artemis | 0 | 0:2.16.0-18.redhat_00052.1.el8eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el8 | eap7-activemq-artemis-cli | 0 | 0:2.16.0-18.redhat_00052.1.el8eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el8 | eap7-activemq-artemis-commons | 0 | 0:2.16.0-18.redhat_00052.1.el8eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el8 | eap7-activemq-artemis-core-client | 0 | 0:2.16.0-18.redhat_00052.1.el8eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el8 | eap7-activemq-artemis-dto | 0 | 0:2.16.0-18.redhat_00052.1.el8eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el8 | eap7-activemq-artemis-hornetq-protocol | 0 | 0:2.16.0-18.redhat_00052.1.el8eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el8 | eap7-activemq-artemis-hqclient-protocol | 0 | 0:2.16.0-18.redhat_00052.1.el8eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el8 | eap7-activemq-artemis-jdbc-store | 0 | 0:2.16.0-18.redhat_00052.1.el8eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el8 | eap7-activemq-artemis-jms-client | 0 | 0:2.16.0-18.redhat_00052.1.el8eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el8 | eap7-activemq-artemis-jms-server | 0 | 0:2.16.0-18.redhat_00052.1.el8eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el8 | eap7-activemq-artemis-journal | 0 | 0:2.16.0-18.redhat_00052.1.el8eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el8 | eap7-activemq-artemis-ra | 0 | 0:2.16.0-18.redhat_00052.1.el8eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el8 | eap7-activemq-artemis-selector | 0 | 0:2.16.0-18.redhat_00052.1.el8eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el8 | eap7-activemq-artemis-server | 0 | 0:2.16.0-18.redhat_00052.1.el8eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el8 | eap7-activemq-artemis-service-extensions | 0 | 0:2.16.0-18.redhat_00052.1.el8eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el8 | eap7-activemq-artemis-tools | 0 | 0:2.16.0-18.redhat_00052.1.el8eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el8 | eap7-apache-cxf | 0 | 0:3.4.10-2.redhat_00001.1.el8eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el8 | eap7-apache-cxf-rt | 0 | 0:3.4.10-2.redhat_00001.1.el8eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el8 | eap7-apache-cxf-services | 0 | 0:3.4.10-2.redhat_00001.1.el8eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el8 | eap7-apache-cxf-tools | 0 | 0:3.4.10-2.redhat_00001.1.el8eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el8 | eap7-eclipse-jgit | 0 | 0:5.13.3.202401111512-1.r_redhat_00001.1.el8eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el8 | eap7-elytron-web | 0 | 0:1.9.4-1.Final_redhat_00001.1.el8eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el8 | eap7-hal-console | 0 | 0:3.3.21-1.Final_redhat_00001.1.el8eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el8 | eap7-hibernate | 0 | 0:5.3.36-1.Final_redhat_00001.1.el8eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el8 | eap7-hibernate-core | 0 | 0:5.3.36-1.Final_redhat_00001.1.el8eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el8 | eap7-hibernate-entitymanager | 0 | 0:5.3.36-1.Final_redhat_00001.1.el8eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el8 | eap7-hibernate-envers | 0 | 0:5.3.36-1.Final_redhat_00001.1.el8eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el8 | eap7-hibernate-java8 | 0 | 0:5.3.36-1.Final_redhat_00001.1.el8eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el8 | eap7-infinispan | 0 | 0:11.0.18-2.Final_redhat_00001.1.el8eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el8 | eap7-infinispan-cachestore-jdbc | 0 | 0:11.0.18-2.Final_redhat_00001.1.el8eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el8 | eap7-infinispan-cachestore-remote | 0 | 0:11.0.18-2.Final_redhat_00001.1.el8eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el8 | eap7-infinispan-client-hotrod | 0 | 0:11.0.18-2.Final_redhat_00001.1.el8eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el8 | eap7-infinispan-commons | 0 | 0:11.0.18-2.Final_redhat_00001.1.el8eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el8 | eap7-infinispan-component-annotations | 0 | 0:11.0.18-2.Final_redhat_00001.1.el8eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el8 | eap7-infinispan-core | 0 | 0:11.0.18-2.Final_redhat_00001.1.el8eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el8 | eap7-infinispan-hibernate-cache-commons | 0 | 0:11.0.18-2.Final_redhat_00001.1.el8eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el8 | eap7-infinispan-hibernate-cache-spi | 0 | 0:11.0.18-2.Final_redhat_00001.1.el8eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el8 | eap7-infinispan-hibernate-cache-v53 | 0 | 0:11.0.18-2.Final_redhat_00001.1.el8eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el8 | eap7-insights-java-client | 0 | 0:1.1.2-1.redhat_00001.1.el8eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el8 | eap7-jberet | 0 | 0:1.3.9-3.SP3_redhat_00001.1.el8eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el8 | eap7-jberet-core | 0 | 0:1.3.9-3.SP3_redhat_00001.1.el8eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el8 | eap7-jboss-annotations-api_1.3_spec | 0 | 0:2.0.1-3.Final_redhat_00001.1.el8eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el8 | eap7-jboss-cert-helper | 0 | 0:1.1.2-1.redhat_00001.1.el8eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el8 | eap7-jboss-remoting | 0 | 0:5.0.27-4.SP2_redhat_00001.1.el8eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el8 | eap7-jboss-server-migration | 0 | 0:1.10.0-35.Final_redhat_00034.1.el8eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el8 | eap7-jboss-server-migration-cli | 0 | 0:1.10.0-35.Final_redhat_00034.1.el8eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el8 | eap7-jboss-server-migration-core | 0 | 0:1.10.0-35.Final_redhat_00034.1.el8eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el8 | eap7-jboss-xnio-base | 0 | 0:3.8.12-1.SP2_redhat_00001.1.el8eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el8 | eap7-jgroups-kubernetes | 0 | 0:1.0.17-1.Final_redhat_00001.1.el8eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el8 | eap7-lucene-analyzers-common | 0 | 0:5.5.5-6.redhat_2.1.el8eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el8 | eap7-lucene-backward-codecs | 0 | 0:5.5.5-6.redhat_2.1.el8eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el8 | eap7-lucene-core | 0 | 0:5.5.5-6.redhat_2.1.el8eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el8 | eap7-lucene-facet | 0 | 0:5.5.5-6.redhat_2.1.el8eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el8 | eap7-lucene-grouping | 0 | 0:5.5.5-6.redhat_2.1.el8eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el8 | eap7-lucene-misc | 0 | 0:5.5.5-6.redhat_2.1.el8eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el8 | eap7-lucene-queries | 0 | 0:5.5.5-6.redhat_2.1.el8eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el8 | eap7-lucene-queryparser | 0 | 0:5.5.5-6.redhat_2.1.el8eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el8 | eap7-lucene-solr | 0 | 0:5.5.5-6.redhat_2.1.el8eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el8 | eap7-undertow | 0 | 0:2.2.30-1.SP1_redhat_00001.1.el8eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el8 | eap7-undertow-server | 0 | 0:1.9.4-1.Final_redhat_00001.1.el8eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el8 | eap7-wildfly | 0 | 0:7.4.16-4.GA_redhat_00002.1.el8eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el8 | eap7-wildfly-elytron | 0 | 0:1.15.22-1.Final_redhat_00001.1.el8eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el8 | eap7-wildfly-elytron-tool | 0 | 0:1.15.22-1.Final_redhat_00001.1.el8eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el8 | eap7-wildfly-java-jdk11 | 0 | 0:7.4.16-4.GA_redhat_00002.1.el8eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el8 | eap7-wildfly-java-jdk17 | 0 | 0:7.4.16-4.GA_redhat_00002.1.el8eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el8 | eap7-wildfly-java-jdk8 | 0 | 0:7.4.16-4.GA_redhat_00002.1.el8eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el8 | eap7-wildfly-javadocs | 0 | 0:7.4.16-4.GA_redhat_00002.1.el8eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el8 | eap7-wildfly-modules | 0 | 0:7.4.16-4.GA_redhat_00002.1.el8eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el9 | eap7-activemq-artemis | 0 | 0:2.16.0-18.redhat_00052.1.el9eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el9 | eap7-activemq-artemis-cli | 0 | 0:2.16.0-18.redhat_00052.1.el9eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el9 | eap7-activemq-artemis-commons | 0 | 0:2.16.0-18.redhat_00052.1.el9eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el9 | eap7-activemq-artemis-core-client | 0 | 0:2.16.0-18.redhat_00052.1.el9eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el9 | eap7-activemq-artemis-dto | 0 | 0:2.16.0-18.redhat_00052.1.el9eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el9 | eap7-activemq-artemis-hornetq-protocol | 0 | 0:2.16.0-18.redhat_00052.1.el9eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el9 | eap7-activemq-artemis-hqclient-protocol | 0 | 0:2.16.0-18.redhat_00052.1.el9eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el9 | eap7-activemq-artemis-jdbc-store | 0 | 0:2.16.0-18.redhat_00052.1.el9eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el9 | eap7-activemq-artemis-jms-client | 0 | 0:2.16.0-18.redhat_00052.1.el9eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el9 | eap7-activemq-artemis-jms-server | 0 | 0:2.16.0-18.redhat_00052.1.el9eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el9 | eap7-activemq-artemis-journal | 0 | 0:2.16.0-18.redhat_00052.1.el9eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el9 | eap7-activemq-artemis-ra | 0 | 0:2.16.0-18.redhat_00052.1.el9eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el9 | eap7-activemq-artemis-selector | 0 | 0:2.16.0-18.redhat_00052.1.el9eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el9 | eap7-activemq-artemis-server | 0 | 0:2.16.0-18.redhat_00052.1.el9eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el9 | eap7-activemq-artemis-service-extensions | 0 | 0:2.16.0-18.redhat_00052.1.el9eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el9 | eap7-activemq-artemis-tools | 0 | 0:2.16.0-18.redhat_00052.1.el9eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el9 | eap7-apache-cxf | 0 | 0:3.4.10-2.redhat_00001.1.el9eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el9 | eap7-apache-cxf-rt | 0 | 0:3.4.10-2.redhat_00001.1.el9eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el9 | eap7-apache-cxf-services | 0 | 0:3.4.10-2.redhat_00001.1.el9eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el9 | eap7-apache-cxf-tools | 0 | 0:3.4.10-2.redhat_00001.1.el9eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el9 | eap7-eclipse-jgit | 0 | 0:5.13.3.202401111512-1.r_redhat_00001.1.el9eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el9 | eap7-elytron-web | 0 | 0:1.9.4-1.Final_redhat_00001.1.el9eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el9 | eap7-hal-console | 0 | 0:3.3.21-1.Final_redhat_00001.1.el9eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el9 | eap7-hibernate | 0 | 0:5.3.36-1.Final_redhat_00001.1.el9eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el9 | eap7-hibernate-core | 0 | 0:5.3.36-1.Final_redhat_00001.1.el9eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el9 | eap7-hibernate-envers | 0 | 0:5.3.36-1.Final_redhat_00001.1.el9eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el9 | eap7-infinispan | 0 | 0:11.0.18-2.Final_redhat_00001.1.el9eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el9 | eap7-infinispan-cachestore-jdbc | 0 | 0:11.0.18-2.Final_redhat_00001.1.el9eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el9 | eap7-infinispan-cachestore-remote | 0 | 0:11.0.18-2.Final_redhat_00001.1.el9eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el9 | eap7-infinispan-client-hotrod | 0 | 0:11.0.18-2.Final_redhat_00001.1.el9eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el9 | eap7-infinispan-commons | 0 | 0:11.0.18-2.Final_redhat_00001.1.el9eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el9 | eap7-infinispan-component-annotations | 0 | 0:11.0.18-2.Final_redhat_00001.1.el9eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el9 | eap7-infinispan-core | 0 | 0:11.0.18-2.Final_redhat_00001.1.el9eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el9 | eap7-infinispan-hibernate-cache-commons | 0 | 0:11.0.18-2.Final_redhat_00001.1.el9eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el9 | eap7-infinispan-hibernate-cache-spi | 0 | 0:11.0.18-2.Final_redhat_00001.1.el9eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el9 | eap7-infinispan-hibernate-cache-v53 | 0 | 0:11.0.18-2.Final_redhat_00001.1.el9eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el9 | eap7-insights-java-client | 0 | 0:1.1.2-1.redhat_00001.1.el9eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el9 | eap7-jberet | 0 | 0:1.3.9-3.SP3_redhat_00001.1.el9eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el9 | eap7-jberet-core | 0 | 0:1.3.9-3.SP3_redhat_00001.1.el9eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el9 | eap7-jboss-annotations-api_1.3_spec | 0 | 0:2.0.1-3.Final_redhat_00001.1.el9eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el9 | eap7-jboss-cert-helper | 0 | 0:1.1.2-1.redhat_00001.1.el9eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el9 | eap7-jboss-remoting | 0 | 0:5.0.27-4.SP2_redhat_00001.1.el9eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el9 | eap7-jboss-server-migration | 0 | 0:1.10.0-35.Final_redhat_00034.1.el9eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el9 | eap7-jboss-server-migration-cli | 0 | 0:1.10.0-35.Final_redhat_00034.1.el9eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el9 | eap7-jboss-server-migration-core | 0 | 0:1.10.0-35.Final_redhat_00034.1.el9eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el9 | eap7-jboss-xnio-base | 0 | 0:3.8.12-1.SP2_redhat_00001.1.el9eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el9 | eap7-jgroups-kubernetes | 0 | 0:1.0.17-1.Final_redhat_00001.1.el9eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el9 | eap7-lucene-analyzers-common | 0 | 0:5.5.5-6.redhat_2.1.el9eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el9 | eap7-lucene-backward-codecs | 0 | 0:5.5.5-6.redhat_2.1.el9eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el9 | eap7-lucene-core | 0 | 0:5.5.5-6.redhat_2.1.el9eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el9 | eap7-lucene-facet | 0 | 0:5.5.5-6.redhat_2.1.el9eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el9 | eap7-lucene-misc | 0 | 0:5.5.5-6.redhat_2.1.el9eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el9 | eap7-lucene-queries | 0 | 0:5.5.5-6.redhat_2.1.el9eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el9 | eap7-lucene-queryparser | 0 | 0:5.5.5-6.redhat_2.1.el9eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el9 | eap7-lucene-solr | 0 | 0:5.5.5-6.redhat_2.1.el9eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el9 | eap7-undertow | 0 | 0:2.2.30-1.SP1_redhat_00001.1.el9eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el9 | eap7-undertow-server | 0 | 0:1.9.4-1.Final_redhat_00001.1.el9eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el9 | eap7-wildfly | 0 | 0:7.4.16-4.GA_redhat_00002.1.el9eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el9 | eap7-wildfly-elytron | 0 | 0:1.15.22-1.Final_redhat_00001.1.el9eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el9 | eap7-wildfly-elytron-tool | 0 | 0:1.15.22-1.Final_redhat_00001.1.el9eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el9 | eap7-wildfly-java-jdk11 | 0 | 0:7.4.16-4.GA_redhat_00002.1.el9eap |
| Red Hat:jboss_enterprise_application_platform:7.4::el9 | eap7-wildfly-java-jdk17 | 0 | 0:7.4.16-4.GA_redhat_00002.1.el9eap |
Related vulnerabilities
- GHSA-33hj-rcmx-86mv Undertow Servlets Vulnerable to Remote DoS via OutOfMemoryError when Passed Large… Also affects io.undertow:undertow-core
- CVE-2024-4027 A flaw was found in Undertow. Also affects io.undertow:undertow-core
- CVE-2025-12543 A flaw was found in the Undertow HTTP server core, which is used in WildFly, JBoss EAP… Also affects io.undertow:undertow-core
- CVE-2024-3884 A flaw was found in Undertow that can cause remote denial of service attacks. Also affects io.undertow:undertow-core
- CVE-2024-4109 undertow: information leakage via HTTP/2 request header reuse Also affects io.undertow:undertow-core
- CVE-2023-4639 A flaw was found in Undertow, which incorrectly parses cookies with certain… Also affects io.undertow:undertow-core
- CVE-2023-1973 A flaw was found in Undertow package. Also affects io.undertow:undertow-core
- CVE-2024-7885 A vulnerability was found in Undertow where the ProxyProtocolReadListener reuses the same… Also affects io.undertow:undertow-core