Uncontrolled Resource Consumption in Undertow
It was found that URLResource.getLastModified() in Undertow closes the file descriptors only when they are finalized which can cause file descriptors to exhaust. This leads to a file handler leak.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-1114US | medium6.5 | — | ||
It was found that URLResource.getLastModified() in Undertow closes the file descriptors only when they are finalized which can cause file descriptors to exhaust. This leads to a fi… | ||||
02
references
External citations — patches, advisories, analysis.
- https://access.redhat.com/errata/RHSA-2018:2643WEB
- https://access.redhat.com/errata/RHSA-2018:2669WEB
- https://access.redhat.com/errata/RHSA-2019:0877WEB
- https://bugs.openjdk.java.net/browse/JDK-6956385WEB
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1114WEB
- https://issues.jboss.org/browse/UNDERTOW-1338WEB
- https://nvd.nist.gov/vuln/detail/CVE-2018-1114ADVISORY
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan