Skip to content
Sign in
Not rated

CVE-2019-19343 A flaw was found in Undertow when using Remoting as shipped in Red Hat Jboss EAP before version 7.2.4

Description

A flaw was found in Undertow when using Remoting as shipped in Red Hat Jboss EAP before version 7.2.4. A memory leak in HttpOpenListener due to holding remote connections indefinitely may lead to denial of service. Versions before undertow 2.0.25.SP1 and jboss-remoting 5.0.14.SP1 are believed to be vulnerable.

Affected products and versions

Product Affected versions Fixed in
Undertow Versions not published

Other CVEs of Undertow

The 14 CVEs of Undertow →
CVE-2022-4492 The undertow client is not checking the server identity presented by the server certificate in https connections Not rated CVE-2022-2764 A flaw was found in Undertow Not rated CVE-2022-1259 A flaw was found in Undertow Not rated CVE-2022-1319 A flaw was found in Undertow Not rated
Track this CVE