Undertow vulnerable to denial of service
A flaw was found in undertow. Servlets annotated with @MultipartConfig may cause an OutOfMemoryError due to large multipart content. This may allow unauthorized users to cause remote Denial of Service (DoS) attack. If the server uses fileSizeThreshold to limit the file size, it's possible to bypass the limit by setting the file name in the request to null.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-3223US | high7.5 | — | ||
A flaw was found in undertow. Servlets annotated with @MultipartConfig may cause an OutOfMemoryError due to large multipart content. This may allow unauthorized users to cause remo… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://access.redhat.com/errata/RHSA-2023:4505WEB
- https://access.redhat.com/errata/RHSA-2023:4506WEB
- https://access.redhat.com/errata/RHSA-2023:4507WEB
- https://access.redhat.com/errata/RHSA-2023:4509WEB
- https://access.redhat.com/errata/RHSA-2023:4918WEB
- https://access.redhat.com/errata/RHSA-2023:4919WEB
- https://access.redhat.com/errata/RHSA-2023:4920WEB
- https://access.redhat.com/errata/RHSA-2023:4921WEB
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan