Uncontrolled Resource Consumption in Undertow
It was found that URLResource.getLastModified() in Undertow closes the file descriptors only when they are finalized which can cause file descriptors to exhaust. This leads to a file handler leak.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2018-1114US | medium6.5 | — | ||
It was found that URLResource.getLastModified() in Undertow closes the file descriptors only when they are finalized which can cause file descriptors to exhaust. This leads to a fi… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://access.redhat.com/errata/RHSA-2018:2643WEB
- https://access.redhat.com/errata/RHSA-2018:2669WEB
- https://access.redhat.com/errata/RHSA-2019:0877WEB
- https://bugs.openjdk.java.net/browse/JDK-6956385WEB
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1114WEB
- https://issues.jboss.org/browse/UNDERTOW-1338WEB
- https://nvd.nist.gov/vuln/detail/CVE-2018-1114ADVISORY
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan