GHSA-g4cp-h53p-v3v8

ghsaUSosv

Allocation of Resources Without Limits or Throttling in Undertow

view advisory published 2021-04-30Licence: CC-BY-4.0

A flaw was discovered in Undertow in versions before Undertow 2.1.1.Final where certain requests to the "Expect: 100-continue" header may cause an out of memory error. This flaw may potentially lead to a denial of service.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2020-10705US	high7.5	1.22% (69th)	—	2020-06-10
A flaw was discovered in Undertow in versions before Undertow 2.1.1.Final where certain requests to the "Expect: 100-continue" header may cause an out of memory error. This flaw ma…

references

External citations — patches, advisories, analysis.

https://bugzilla.redhat.com/show_bug.cgi?id=1803241WEB
https://nvd.nist.gov/vuln/detail/CVE-2020-10705ADVISORY
https://security.netapp.com/advisory/ntap-20220210-0014WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan