CVE-2024-5971
Undertow: response write hangs in case of java 17 tlsv1.3 newsessionticket
7.5 HighFix available
A vulnerability was found in Undertow, where the chunked response hangs after the body was flushed. The response headers and body were sent but the client would continue waiting as Undertow does not send the expected 0\r\n termination of the chunked response. This results in uncontrolled resource consumption, leaving the server side to a denial of service attack. This happens only with Java 17 TLSv1.3 scenarios.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
2.92%Up 2.9 points since Jul 9, 2024
What each source reports
CVE List Score used
Undertow: response write hangs in case of java 17 tlsv1.3 newsessionticket
A vulnerability was found in Undertow, where the chunked response hangs after the body was flushed. The response headers and body were sent but the client would continue waiting as Undertow does not send the expected 0\r\n termination of the chunked response. This results in uncontrolled resource consumption, leaving the server side to a denial of service attack. This happens only with Java 17 TLSv1.3 scenarios.
- Record
CVE-2024-5971- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-674
- Updated
- 2026-11-02
EUVDEUVD-2024-2452
A vulnerability was found in Undertow, where the chunked response hangs after the body was flushed. The response headers and body were sent but the client would continue waiting as Undertow does not send the expected 0\r\n termination of the chunked response. This results in uncontrolled resource consumption, leaving the server side to a denial of service attack. This happens only with Java 17 TLSv1.3 scenarios.
- Record
EUVD-2024-2452- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-xpp6-8r3j-ww43
Undertow Denial of Service vulnerability
A vulnerability was found in Undertow, where the chunked response hangs after the body was flushed. The response headers and body were sent but the client would continue waiting as Undertow does not send the expected 0\r\n termination of the chunked response. This results in uncontrolled resource consumption, leaving the server side to a denial of service attack. This happens only with Java 17 TLSv1.3 scenarios.
- Record
GHSA-xpp6-8r3j-ww43- CVSS 4.0
- 8.7 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N - CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-674
- Updated
- 2026-11-02
NVD
A vulnerability was found in Undertow, where the chunked response hangs after the body was flushed. The response headers and body were sent but the client would continue waiting as Undertow does not send the expected 0\r\n termination of the chunked response. This results in uncontrolled resource consumption, leaving the server side to a denial of service attack. This happens only with Java 17 TLSv1.3 scenarios.
- Record
CVE-2024-5971- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-674
- Updated
- 2026-11-02
OSV
Undertow: response write hangs in case of java 17 tlsv1.3 newsessionticket
A vulnerability was found in Undertow, where the chunked response hangs after the body was flushed. The response headers and body were sent but the client would continue waiting as Undertow does not send the expected 0\r\n termination of the chunked response. This results in uncontrolled resource consumption, leaving the server side to a denial of service attack. This happens only with Java 17 TLSv1.3 scenarios.
- Record
CVE-2024-5971- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-674
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2024-5971
A vulnerability was found in Undertow, where the chunked response hangs after the body was flushed. The response headers and body were sent but the client would continue waiting as Undertow does not send the expected 0\r\n termination of the chunked response. This results in uncontrolled resource consumption, leaving the server side to a denial of service attack. This happens only with Java 17 TLSv1.3 scenarios.
- Record
DEBIAN-CVE-2024-5971- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 10 moreShow less
OSVGHSA-xpp6-8r3j-ww43
Undertow Denial of Service vulnerability
A vulnerability was found in Undertow, where the chunked response hangs after the body was flushed. The response headers and body were sent but the client would continue waiting as Undertow does not send the expected 0\r\n termination of the chunked response. This results in uncontrolled resource consumption, leaving the server side to a denial of service attack. This happens only with Java 17 TLSv1.3 scenarios.
- Record
GHSA-xpp6-8r3j-ww43- CVSS 4.0
- 8.7 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N - CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-674
- Updated
- 2026-11-02
OSVRHSA-2024:5143
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.18 Security update
- Record
RHSA-2024:5143- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2024:5144
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.18 Security update
- Record
RHSA-2024:5144- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2024:5145
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.18 Security update
- Record
RHSA-2024:5145- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2024-5971
A vulnerability was found in Undertow, where the chunked response hangs after the body was flushed. The response headers and body were sent but the client would continue waiting as Undertow does not send the expected 0\r\n termination of the chunked response. This results in uncontrolled resource consumption, leaving the server side to a denial of service attack. This happens only with Java 17 TLSv1.3 scenarios.
- Record
UBUNTU-CVE-2024-5971- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVCLSA-2025-1766534903 No score
TuxCare security update for io.undertow:undertow-core (4 CVEs)
TuxCare rebuilt io.undertow:undertow-core to address 4 CVEs. Fixed in 2.3.10.Final-tuxcare.2.
- Record
CLSA-2025-1766534903- Updated
- 2026-11-02
OSVCLSA-2026-1775435425 No score
TuxCare security update for io.undertow:undertow-core (1 CVE)
TuxCare rebuilt io.undertow:undertow-core to address 1 CVE. Fixed in 2.2.33.Final-tuxcare.3.
- Record
CLSA-2026-1775435425- Updated
- 2026-11-02
OSVCLSA-2026-1782349133 No score
TuxCare security update for io.undertow:undertow-core (5 CVEs)
TuxCare rebuilt io.undertow:undertow-core to address 5 CVEs. Fixed in 2.3.0.Final-tuxcare.3.
- Record
CLSA-2026-1782349133- Updated
- 2026-11-02
OSVCLSA-2026-1787137111 No score
TuxCare security update for io.undertow:undertow-core (6 CVEs)
TuxCare rebuilt io.undertow:undertow-core to address 6 CVEs. Fixed in 2.2.24.Final-tuxcare.1.
- Record
CLSA-2026-1787137111- Updated
- 2026-11-02
OSVCLSA-2026-1793853308 No score
TuxCare security update for io.undertow:undertow-core (6 CVEs)
TuxCare rebuilt io.undertow:undertow-core to address 6 CVEs. Fixed in 1.4.27.Final-tuxcare.3.
- Record
CLSA-2026-1793853308- Updated
- 2026-11-05
Affected products
- red hat build of apache camel - hawtio 4
- red hat build of apache camel 3.20.7 for spring boot
- red hat build of apache camel 4.4.1 for spring boot 3.2
- red hat build of apache camel 4.4.2 for spring boot
- red hat build of apache camel for spring boot 3
- red hat build of keycloak
- red hat build of quarkus
- red hat data grid 8
- red hat fuse 7
- red hat integration camel k 1
- red hat jboss data grid 7
- red hat jboss enterprise application platform
Show 8 moreShow less
- red hat jboss enterprise application platform 7
- red hat jboss enterprise application platform 7.4 for rhel 8
- red hat jboss enterprise application platform 7.4 for rhel 9
- red hat jboss enterprise application platform 7.4 on rhel 7
- red hat jboss enterprise application platform 8
- red hat jboss enterprise application platform expansion pack
- red hat process automation 7
- red hat single sign-on 7
Affected packages
| Package | Affected | Fixed |
|---|---|---|
io.undertow:undertow-coreMaven |
2.3.0.Alpha1 up to 2.3.15.Final | 2.3.15.Final |
io.undertow:undertow-coreMaven |
before 2.2.34.Final | 2.2.34.Final |
io.undertow:undertow-coreTuxCare:Maven From an advisory covering 4 CVEs |
2.3.10.Final up to 2.3.10.Final-tuxcare.2, plus listed versions 2.3.10.Final-tuxcare.1 |
2.3.10.Final-tuxcare.2 |
io.undertow:undertow-coreTuxCare:Maven |
2.2.33.Final up to 2.2.33.Final-tuxcare.3, plus listed versions 2.2.33.Final-tuxcare.12.2.33.Final-tuxcare.2 |
2.2.33.Final-tuxcare.3 |
io.undertow:undertow-coreTuxCare:Maven From an advisory covering 5 CVEs |
2.3.0.Final up to 2.3.0.Final-tuxcare.3, plus listed versions 2.3.0.Final-tuxcare.12.3.0.Final-tuxcare.2 |
2.3.0.Final-tuxcare.3 |
io.undertow:undertow-coreTuxCare:Maven From an advisory covering 6 CVEs |
2.2.24.Final up to 2.2.24.Final-tuxcare.1 | 2.2.24.Final-tuxcare.1 |
io.undertow:undertow-coreTuxCare:Maven From an advisory covering 6 CVEs |
1.4.27.Final up to 1.4.27.Final-tuxcare.3, plus listed versions 1.4.27.Final-tuxcare.11.4.27.Final-tuxcare.2 |
1.4.27.Final-tuxcare.3 |
undertowDebian:14 |
before 2.3.18-1, plus listed versions 1.3.11-11.3.16-11.3.19-11.3.21-11.3.23-1 Show 45 moreShow less1.3.4-11.3.5-11.3.7-11.4.0-11.4.1-11.4.18-11.4.20-11.4.21-11.4.21-21.4.22-11.4.23-11.4.23-21.4.23-31.4.25-11.4.25-21.4.3-11.4.4-11.4.6-11.4.7-11.4.8-12.0.23-12.0.25-12.0.26-12.0.27-12.0.28-12.0.29-12.0.30-12.1.0-12.1.1-12.1.3-12.2.0-12.2.10-12.2.12-12.2.13-12.2.14-12.2.16-12.2.17-12.2.18-12.2.19-12.2.2-12.2.20-12.2.21-12.2.3-12.2.4-12.2.5-1 |
2.3.18-1 |
io.undertow:undertow-coreMaven |
2.3.0.Alpha1 up to 2.3.15.Final, plus listed versions 2.3.0.Alpha22.3.0.Beta12.3.0.Final2.3.1.Final2.3.10.Final Show 12 moreShow less2.3.11.Final2.3.12.Final2.3.13.Final2.3.14.Final2.3.2.Final2.3.3.Final2.3.4.Final2.3.5.Final2.3.6.Final2.3.7.Final2.3.8.Final2.3.9.Final |
2.3.15.Final |
io.undertow:undertow-coreMaven |
before 2.2.34.Final, plus listed versions 1.0.0.Alpha11.0.0.Alpha101.0.0.Alpha111.0.0.Alpha121.0.0.Alpha13 Show 45 moreShow less1.0.0.Alpha141.0.0.Alpha151.0.0.Alpha161.0.0.Alpha171.0.0.Alpha181.0.0.Alpha191.0.0.Alpha21.0.0.Alpha201.0.0.Alpha211.0.0.Alpha221.0.0.Alpha31.0.0.Alpha41.0.0.Alpha51.0.0.Alpha61.0.0.Alpha71.0.0.Alpha81.0.0.Alpha91.0.0.Beta11.0.0.Beta101.0.0.Beta111.0.0.Beta121.0.0.Beta131.0.0.Beta141.0.0.Beta151.0.0.Beta161.0.0.Beta171.0.0.Beta181.0.0.Beta191.0.0.Beta21.0.0.Beta201.0.0.Beta211.0.0.Beta221.0.0.Beta231.0.0.Beta241.0.0.Beta251.0.0.Beta261.0.0.Beta271.0.0.Beta281.0.0.Beta291.0.0.Beta31.0.0.Beta301.0.0.Beta311.0.0.Beta321.0.0.Beta331.0.0.Beta4 |
2.2.34.Final |
Show 189 moreShow less
| Package | Affected | Fixed |
|---|---|---|
eap7-undertowRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:2.2.33-1.SP1_redhat_00001.1.el7eap | 0:2.2.33-1.SP1_redhat_00001.1.el7eap |
eap7-bouncycastleRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:1.78.1-1.redhat_00002.1.el7eap | 0:1.78.1-1.redhat_00002.1.el7eap |
eap7-bouncycastle-mailRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:1.78.1-1.redhat_00002.1.el7eap | 0:1.78.1-1.redhat_00002.1.el7eap |
eap7-bouncycastle-pgRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:1.78.1-1.redhat_00002.1.el7eap | 0:1.78.1-1.redhat_00002.1.el7eap |
eap7-bouncycastle-pkixRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:1.78.1-1.redhat_00002.1.el7eap | 0:1.78.1-1.redhat_00002.1.el7eap |
eap7-bouncycastle-provRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:1.78.1-1.redhat_00002.1.el7eap | 0:1.78.1-1.redhat_00002.1.el7eap |
eap7-bouncycastle-utilRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:1.78.1-1.redhat_00002.1.el7eap | 0:1.78.1-1.redhat_00002.1.el7eap |
eap7-hal-consoleRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:3.3.23-1.Final_redhat_00001.1.el7eap | 0:3.3.23-1.Final_redhat_00001.1.el7eap |
eap7-ironjacamarRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:1.5.17-1.Final_redhat_00001.1.el7eap | 0:1.5.17-1.Final_redhat_00001.1.el7eap |
eap7-ironjacamar-common-apiRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:1.5.17-1.Final_redhat_00001.1.el7eap | 0:1.5.17-1.Final_redhat_00001.1.el7eap |
eap7-ironjacamar-common-implRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:1.5.17-1.Final_redhat_00001.1.el7eap | 0:1.5.17-1.Final_redhat_00001.1.el7eap |
eap7-ironjacamar-common-spiRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:1.5.17-1.Final_redhat_00001.1.el7eap | 0:1.5.17-1.Final_redhat_00001.1.el7eap |
eap7-ironjacamar-core-apiRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:1.5.17-1.Final_redhat_00001.1.el7eap | 0:1.5.17-1.Final_redhat_00001.1.el7eap |
eap7-ironjacamar-core-implRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:1.5.17-1.Final_redhat_00001.1.el7eap | 0:1.5.17-1.Final_redhat_00001.1.el7eap |
eap7-ironjacamar-deployers-commonRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:1.5.17-1.Final_redhat_00001.1.el7eap | 0:1.5.17-1.Final_redhat_00001.1.el7eap |
eap7-ironjacamar-jdbcRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:1.5.17-1.Final_redhat_00001.1.el7eap | 0:1.5.17-1.Final_redhat_00001.1.el7eap |
eap7-ironjacamar-validatorRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:1.5.17-1.Final_redhat_00001.1.el7eap | 0:1.5.17-1.Final_redhat_00001.1.el7eap |
eap7-jandexRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:2.4.5-1.Final_redhat_00001.1.el7eap | 0:2.4.5-1.Final_redhat_00001.1.el7eap |
eap7-jboss-remotingRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:5.0.29-1.Final_redhat_00001.1.el7eap | 0:5.0.29-1.Final_redhat_00001.1.el7eap |
eap7-jboss-server-migrationRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:1.10.0-37.Final_redhat_00037.1.el7eap | 0:1.10.0-37.Final_redhat_00037.1.el7eap |
eap7-jboss-server-migration-cliRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:1.10.0-37.Final_redhat_00037.1.el7eap | 0:1.10.0-37.Final_redhat_00037.1.el7eap |
eap7-jboss-server-migration-coreRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:1.10.0-37.Final_redhat_00037.1.el7eap | 0:1.10.0-37.Final_redhat_00037.1.el7eap |
eap7-jboss-xnio-baseRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:3.8.16-1.Final_redhat_00001.1.el7eap | 0:3.8.16-1.Final_redhat_00001.1.el7eap |
eap7-log4j-jboss-logmanagerRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:1.3.1-1.Final_redhat_00002.1.el7eap | 0:1.3.1-1.Final_redhat_00002.1.el7eap |
eap7-nettyRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el7eap | 0:4.1.108-1.Final_redhat_00001.1.el7eap |
eap7-netty-allRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el7eap | 0:4.1.108-1.Final_redhat_00001.1.el7eap |
eap7-netty-bufferRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el7eap | 0:4.1.108-1.Final_redhat_00001.1.el7eap |
eap7-netty-codecRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el7eap | 0:4.1.108-1.Final_redhat_00001.1.el7eap |
eap7-netty-codec-dnsRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el7eap | 0:4.1.108-1.Final_redhat_00001.1.el7eap |
eap7-netty-codec-haproxyRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el7eap | 0:4.1.108-1.Final_redhat_00001.1.el7eap |
eap7-netty-codec-httpRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el7eap | 0:4.1.108-1.Final_redhat_00001.1.el7eap |
eap7-netty-codec-http2Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el7eap | 0:4.1.108-1.Final_redhat_00001.1.el7eap |
eap7-netty-codec-memcacheRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el7eap | 0:4.1.108-1.Final_redhat_00001.1.el7eap |
eap7-netty-codec-mqttRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el7eap | 0:4.1.108-1.Final_redhat_00001.1.el7eap |
eap7-netty-codec-redisRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el7eap | 0:4.1.108-1.Final_redhat_00001.1.el7eap |
eap7-netty-codec-smtpRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el7eap | 0:4.1.108-1.Final_redhat_00001.1.el7eap |
eap7-netty-codec-socksRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el7eap | 0:4.1.108-1.Final_redhat_00001.1.el7eap |
eap7-netty-codec-stompRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el7eap | 0:4.1.108-1.Final_redhat_00001.1.el7eap |
eap7-netty-codec-xmlRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el7eap | 0:4.1.108-1.Final_redhat_00001.1.el7eap |
eap7-netty-commonRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el7eap | 0:4.1.108-1.Final_redhat_00001.1.el7eap |
eap7-netty-handlerRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el7eap | 0:4.1.108-1.Final_redhat_00001.1.el7eap |
eap7-netty-handler-proxyRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el7eap | 0:4.1.108-1.Final_redhat_00001.1.el7eap |
eap7-netty-resolverRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el7eap | 0:4.1.108-1.Final_redhat_00001.1.el7eap |
eap7-netty-resolver-dnsRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el7eap | 0:4.1.108-1.Final_redhat_00001.1.el7eap |
eap7-netty-resolver-dns-classes-macosRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el7eap | 0:4.1.108-1.Final_redhat_00001.1.el7eap |
eap7-netty-transportRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el7eap | 0:4.1.108-1.Final_redhat_00001.1.el7eap |
eap7-netty-transport-classes-epollRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el7eap | 0:4.1.108-1.Final_redhat_00001.1.el7eap |
eap7-netty-transport-classes-kqueueRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el7eap | 0:4.1.108-1.Final_redhat_00001.1.el7eap |
eap7-netty-transport-native-epollRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el7eap | 0:4.1.108-1.Final_redhat_00001.1.el7eap |
eap7-netty-transport-native-epoll-debuginfoRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el7eap | 0:4.1.108-1.Final_redhat_00001.1.el7eap |
eap7-netty-transport-native-unix-commonRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el7eap | 0:4.1.108-1.Final_redhat_00001.1.el7eap |
eap7-netty-transport-rxtxRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el7eap | 0:4.1.108-1.Final_redhat_00001.1.el7eap |
eap7-netty-transport-sctpRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el7eap | 0:4.1.108-1.Final_redhat_00001.1.el7eap |
eap7-netty-transport-udtRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el7eap | 0:4.1.108-1.Final_redhat_00001.1.el7eap |
eap7-netty-xnio-transportRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:0.1.10-1.Final_redhat_00001.1.el7eap | 0:0.1.10-1.Final_redhat_00001.1.el7eap |
eap7-wildflyRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:7.4.18-1.GA_redhat_00001.1.el7eap | 0:7.4.18-1.GA_redhat_00001.1.el7eap |
eap7-wildfly-java-jdk11Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:7.4.18-1.GA_redhat_00001.1.el7eap | 0:7.4.18-1.GA_redhat_00001.1.el7eap |
eap7-wildfly-java-jdk8Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:7.4.18-1.GA_redhat_00001.1.el7eap | 0:7.4.18-1.GA_redhat_00001.1.el7eap |
eap7-wildfly-javadocsRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:7.4.18-1.GA_redhat_00001.1.el7eap | 0:7.4.18-1.GA_redhat_00001.1.el7eap |
eap7-wildfly-modulesRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:7.4.18-1.GA_redhat_00001.1.el7eap | 0:7.4.18-1.GA_redhat_00001.1.el7eap |
eap7-undertowRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:2.2.33-1.SP1_redhat_00001.1.el8eap | 0:2.2.33-1.SP1_redhat_00001.1.el8eap |
eap7-bouncycastleRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:1.78.1-1.redhat_00002.1.el8eap | 0:1.78.1-1.redhat_00002.1.el8eap |
eap7-bouncycastle-mailRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:1.78.1-1.redhat_00002.1.el8eap | 0:1.78.1-1.redhat_00002.1.el8eap |
eap7-bouncycastle-pgRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:1.78.1-1.redhat_00002.1.el8eap | 0:1.78.1-1.redhat_00002.1.el8eap |
eap7-bouncycastle-pkixRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:1.78.1-1.redhat_00002.1.el8eap | 0:1.78.1-1.redhat_00002.1.el8eap |
eap7-bouncycastle-provRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:1.78.1-1.redhat_00002.1.el8eap | 0:1.78.1-1.redhat_00002.1.el8eap |
eap7-bouncycastle-utilRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:1.78.1-1.redhat_00002.1.el8eap | 0:1.78.1-1.redhat_00002.1.el8eap |
eap7-hal-consoleRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:3.3.23-1.Final_redhat_00001.1.el8eap | 0:3.3.23-1.Final_redhat_00001.1.el8eap |
eap7-ironjacamarRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:1.5.17-1.Final_redhat_00001.1.el8eap | 0:1.5.17-1.Final_redhat_00001.1.el8eap |
eap7-ironjacamar-common-apiRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:1.5.17-1.Final_redhat_00001.1.el8eap | 0:1.5.17-1.Final_redhat_00001.1.el8eap |
eap7-ironjacamar-common-implRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:1.5.17-1.Final_redhat_00001.1.el8eap | 0:1.5.17-1.Final_redhat_00001.1.el8eap |
eap7-ironjacamar-common-spiRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:1.5.17-1.Final_redhat_00001.1.el8eap | 0:1.5.17-1.Final_redhat_00001.1.el8eap |
eap7-ironjacamar-core-apiRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:1.5.17-1.Final_redhat_00001.1.el8eap | 0:1.5.17-1.Final_redhat_00001.1.el8eap |
eap7-ironjacamar-core-implRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:1.5.17-1.Final_redhat_00001.1.el8eap | 0:1.5.17-1.Final_redhat_00001.1.el8eap |
eap7-ironjacamar-deployers-commonRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:1.5.17-1.Final_redhat_00001.1.el8eap | 0:1.5.17-1.Final_redhat_00001.1.el8eap |
eap7-ironjacamar-jdbcRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:1.5.17-1.Final_redhat_00001.1.el8eap | 0:1.5.17-1.Final_redhat_00001.1.el8eap |
eap7-ironjacamar-validatorRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:1.5.17-1.Final_redhat_00001.1.el8eap | 0:1.5.17-1.Final_redhat_00001.1.el8eap |
eap7-jandexRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:2.4.5-1.Final_redhat_00001.1.el8eap | 0:2.4.5-1.Final_redhat_00001.1.el8eap |
eap7-jboss-remotingRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:5.0.29-1.Final_redhat_00001.1.el8eap | 0:5.0.29-1.Final_redhat_00001.1.el8eap |
eap7-jboss-server-migrationRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:1.10.0-37.Final_redhat_00037.1.el8eap | 0:1.10.0-37.Final_redhat_00037.1.el8eap |
eap7-jboss-server-migration-cliRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:1.10.0-37.Final_redhat_00037.1.el8eap | 0:1.10.0-37.Final_redhat_00037.1.el8eap |
eap7-jboss-server-migration-coreRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:1.10.0-37.Final_redhat_00037.1.el8eap | 0:1.10.0-37.Final_redhat_00037.1.el8eap |
eap7-jboss-xnio-baseRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:3.8.16-1.Final_redhat_00001.1.el8eap | 0:3.8.16-1.Final_redhat_00001.1.el8eap |
eap7-log4j-jboss-logmanagerRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:1.3.1-1.Final_redhat_00002.1.el8eap | 0:1.3.1-1.Final_redhat_00002.1.el8eap |
eap7-nettyRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el8eap | 0:4.1.108-1.Final_redhat_00001.1.el8eap |
eap7-netty-allRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el8eap | 0:4.1.108-1.Final_redhat_00001.1.el8eap |
eap7-netty-bufferRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el8eap | 0:4.1.108-1.Final_redhat_00001.1.el8eap |
eap7-netty-codecRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el8eap | 0:4.1.108-1.Final_redhat_00001.1.el8eap |
eap7-netty-codec-dnsRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el8eap | 0:4.1.108-1.Final_redhat_00001.1.el8eap |
eap7-netty-codec-haproxyRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el8eap | 0:4.1.108-1.Final_redhat_00001.1.el8eap |
eap7-netty-codec-httpRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el8eap | 0:4.1.108-1.Final_redhat_00001.1.el8eap |
eap7-netty-codec-http2Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el8eap | 0:4.1.108-1.Final_redhat_00001.1.el8eap |
eap7-netty-codec-memcacheRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el8eap | 0:4.1.108-1.Final_redhat_00001.1.el8eap |
eap7-netty-codec-mqttRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el8eap | 0:4.1.108-1.Final_redhat_00001.1.el8eap |
eap7-netty-codec-redisRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el8eap | 0:4.1.108-1.Final_redhat_00001.1.el8eap |
eap7-netty-codec-smtpRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el8eap | 0:4.1.108-1.Final_redhat_00001.1.el8eap |
eap7-netty-codec-socksRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el8eap | 0:4.1.108-1.Final_redhat_00001.1.el8eap |
eap7-netty-codec-stompRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el8eap | 0:4.1.108-1.Final_redhat_00001.1.el8eap |
eap7-netty-codec-xmlRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el8eap | 0:4.1.108-1.Final_redhat_00001.1.el8eap |
eap7-netty-commonRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el8eap | 0:4.1.108-1.Final_redhat_00001.1.el8eap |
eap7-netty-handlerRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el8eap | 0:4.1.108-1.Final_redhat_00001.1.el8eap |
eap7-netty-handler-proxyRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el8eap | 0:4.1.108-1.Final_redhat_00001.1.el8eap |
eap7-netty-resolverRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el8eap | 0:4.1.108-1.Final_redhat_00001.1.el8eap |
eap7-netty-resolver-dnsRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el8eap | 0:4.1.108-1.Final_redhat_00001.1.el8eap |
eap7-netty-resolver-dns-classes-macosRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el8eap | 0:4.1.108-1.Final_redhat_00001.1.el8eap |
eap7-netty-transportRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el8eap | 0:4.1.108-1.Final_redhat_00001.1.el8eap |
eap7-netty-transport-classes-epollRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el8eap | 0:4.1.108-1.Final_redhat_00001.1.el8eap |
eap7-netty-transport-classes-kqueueRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el8eap | 0:4.1.108-1.Final_redhat_00001.1.el8eap |
eap7-netty-transport-native-epollRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el8eap | 0:4.1.108-1.Final_redhat_00001.1.el8eap |
eap7-netty-transport-native-epoll-debuginfoRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el8eap | 0:4.1.108-1.Final_redhat_00001.1.el8eap |
eap7-netty-transport-native-unix-commonRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el8eap | 0:4.1.108-1.Final_redhat_00001.1.el8eap |
eap7-netty-transport-rxtxRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el8eap | 0:4.1.108-1.Final_redhat_00001.1.el8eap |
eap7-netty-transport-sctpRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el8eap | 0:4.1.108-1.Final_redhat_00001.1.el8eap |
eap7-netty-transport-udtRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el8eap | 0:4.1.108-1.Final_redhat_00001.1.el8eap |
eap7-netty-xnio-transportRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:0.1.10-1.Final_redhat_00001.1.el8eap | 0:0.1.10-1.Final_redhat_00001.1.el8eap |
eap7-wildflyRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:7.4.18-1.GA_redhat_00001.1.el8eap | 0:7.4.18-1.GA_redhat_00001.1.el8eap |
eap7-wildfly-java-jdk11Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:7.4.18-1.GA_redhat_00001.1.el8eap | 0:7.4.18-1.GA_redhat_00001.1.el8eap |
eap7-wildfly-java-jdk17Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:7.4.18-1.GA_redhat_00001.1.el8eap | 0:7.4.18-1.GA_redhat_00001.1.el8eap |
eap7-wildfly-java-jdk8Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:7.4.18-1.GA_redhat_00001.1.el8eap | 0:7.4.18-1.GA_redhat_00001.1.el8eap |
eap7-wildfly-javadocsRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:7.4.18-1.GA_redhat_00001.1.el8eap | 0:7.4.18-1.GA_redhat_00001.1.el8eap |
eap7-wildfly-modulesRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:7.4.18-1.GA_redhat_00001.1.el8eap | 0:7.4.18-1.GA_redhat_00001.1.el8eap |
eap7-undertowRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:2.2.33-1.SP1_redhat_00001.1.el9eap | 0:2.2.33-1.SP1_redhat_00001.1.el9eap |
eap7-bouncycastleRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:1.78.1-1.redhat_00002.1.el9eap | 0:1.78.1-1.redhat_00002.1.el9eap |
eap7-bouncycastle-mailRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:1.78.1-1.redhat_00002.1.el9eap | 0:1.78.1-1.redhat_00002.1.el9eap |
eap7-bouncycastle-pgRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:1.78.1-1.redhat_00002.1.el9eap | 0:1.78.1-1.redhat_00002.1.el9eap |
eap7-bouncycastle-pkixRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:1.78.1-1.redhat_00002.1.el9eap | 0:1.78.1-1.redhat_00002.1.el9eap |
eap7-bouncycastle-provRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:1.78.1-1.redhat_00002.1.el9eap | 0:1.78.1-1.redhat_00002.1.el9eap |
eap7-bouncycastle-utilRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:1.78.1-1.redhat_00002.1.el9eap | 0:1.78.1-1.redhat_00002.1.el9eap |
eap7-hal-consoleRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:3.3.23-1.Final_redhat_00001.1.el9eap | 0:3.3.23-1.Final_redhat_00001.1.el9eap |
eap7-ironjacamarRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:1.5.17-1.Final_redhat_00001.1.el9eap | 0:1.5.17-1.Final_redhat_00001.1.el9eap |
eap7-ironjacamar-common-apiRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:1.5.17-1.Final_redhat_00001.1.el9eap | 0:1.5.17-1.Final_redhat_00001.1.el9eap |
eap7-ironjacamar-common-implRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:1.5.17-1.Final_redhat_00001.1.el9eap | 0:1.5.17-1.Final_redhat_00001.1.el9eap |
eap7-ironjacamar-common-spiRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:1.5.17-1.Final_redhat_00001.1.el9eap | 0:1.5.17-1.Final_redhat_00001.1.el9eap |
eap7-ironjacamar-core-apiRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:1.5.17-1.Final_redhat_00001.1.el9eap | 0:1.5.17-1.Final_redhat_00001.1.el9eap |
eap7-ironjacamar-core-implRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:1.5.17-1.Final_redhat_00001.1.el9eap | 0:1.5.17-1.Final_redhat_00001.1.el9eap |
eap7-ironjacamar-deployers-commonRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:1.5.17-1.Final_redhat_00001.1.el9eap | 0:1.5.17-1.Final_redhat_00001.1.el9eap |
eap7-ironjacamar-jdbcRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:1.5.17-1.Final_redhat_00001.1.el9eap | 0:1.5.17-1.Final_redhat_00001.1.el9eap |
eap7-ironjacamar-validatorRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:1.5.17-1.Final_redhat_00001.1.el9eap | 0:1.5.17-1.Final_redhat_00001.1.el9eap |
eap7-jandexRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:2.4.5-1.Final_redhat_00001.1.el9eap | 0:2.4.5-1.Final_redhat_00001.1.el9eap |
eap7-jboss-remotingRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:5.0.29-1.Final_redhat_00001.1.el9eap | 0:5.0.29-1.Final_redhat_00001.1.el9eap |
eap7-jboss-server-migrationRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:1.10.0-37.Final_redhat_00037.1.el9eap | 0:1.10.0-37.Final_redhat_00037.1.el9eap |
eap7-jboss-server-migration-cliRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:1.10.0-37.Final_redhat_00037.1.el9eap | 0:1.10.0-37.Final_redhat_00037.1.el9eap |
eap7-jboss-server-migration-coreRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:1.10.0-37.Final_redhat_00037.1.el9eap | 0:1.10.0-37.Final_redhat_00037.1.el9eap |
eap7-jboss-xnio-baseRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:3.8.16-1.Final_redhat_00001.1.el9eap | 0:3.8.16-1.Final_redhat_00001.1.el9eap |
eap7-log4j-jboss-logmanagerRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:1.3.1-1.Final_redhat_00002.1.el9eap | 0:1.3.1-1.Final_redhat_00002.1.el9eap |
eap7-nettyRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el9eap | 0:4.1.108-1.Final_redhat_00001.1.el9eap |
eap7-netty-bufferRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el9eap | 0:4.1.108-1.Final_redhat_00001.1.el9eap |
eap7-netty-codecRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el9eap | 0:4.1.108-1.Final_redhat_00001.1.el9eap |
eap7-netty-codec-dnsRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el9eap | 0:4.1.108-1.Final_redhat_00001.1.el9eap |
eap7-netty-codec-haproxyRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el9eap | 0:4.1.108-1.Final_redhat_00001.1.el9eap |
eap7-netty-codec-httpRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el9eap | 0:4.1.108-1.Final_redhat_00001.1.el9eap |
eap7-netty-codec-http2Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el9eap | 0:4.1.108-1.Final_redhat_00001.1.el9eap |
eap7-netty-codec-memcacheRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el9eap | 0:4.1.108-1.Final_redhat_00001.1.el9eap |
eap7-netty-codec-mqttRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el9eap | 0:4.1.108-1.Final_redhat_00001.1.el9eap |
eap7-netty-codec-redisRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el9eap | 0:4.1.108-1.Final_redhat_00001.1.el9eap |
eap7-netty-codec-smtpRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el9eap | 0:4.1.108-1.Final_redhat_00001.1.el9eap |
eap7-netty-codec-socksRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el9eap | 0:4.1.108-1.Final_redhat_00001.1.el9eap |
eap7-netty-codec-stompRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el9eap | 0:4.1.108-1.Final_redhat_00001.1.el9eap |
eap7-netty-codec-xmlRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el9eap | 0:4.1.108-1.Final_redhat_00001.1.el9eap |
eap7-netty-commonRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el9eap | 0:4.1.108-1.Final_redhat_00001.1.el9eap |
eap7-netty-handlerRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el9eap | 0:4.1.108-1.Final_redhat_00001.1.el9eap |
eap7-netty-handler-proxyRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el9eap | 0:4.1.108-1.Final_redhat_00001.1.el9eap |
eap7-netty-resolverRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el9eap | 0:4.1.108-1.Final_redhat_00001.1.el9eap |
eap7-netty-resolver-dnsRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el9eap | 0:4.1.108-1.Final_redhat_00001.1.el9eap |
eap7-netty-resolver-dns-classes-macosRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el9eap | 0:4.1.108-1.Final_redhat_00001.1.el9eap |
eap7-netty-transportRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el9eap | 0:4.1.108-1.Final_redhat_00001.1.el9eap |
eap7-netty-transport-classes-epollRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el9eap | 0:4.1.108-1.Final_redhat_00001.1.el9eap |
eap7-netty-transport-classes-kqueueRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el9eap | 0:4.1.108-1.Final_redhat_00001.1.el9eap |
eap7-netty-transport-native-epollRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el9eap | 0:4.1.108-1.Final_redhat_00001.1.el9eap |
eap7-netty-transport-native-epoll-debuginfoRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el9eap | 0:4.1.108-1.Final_redhat_00001.1.el9eap |
eap7-netty-transport-native-unix-commonRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el9eap | 0:4.1.108-1.Final_redhat_00001.1.el9eap |
eap7-netty-transport-rxtxRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el9eap | 0:4.1.108-1.Final_redhat_00001.1.el9eap |
eap7-netty-transport-sctpRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el9eap | 0:4.1.108-1.Final_redhat_00001.1.el9eap |
eap7-netty-transport-udtRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el9eap | 0:4.1.108-1.Final_redhat_00001.1.el9eap |
eap7-netty-xnio-transportRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:0.1.10-1.Final_redhat_00001.1.el9eap | 0:0.1.10-1.Final_redhat_00001.1.el9eap |
eap7-wildflyRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:7.4.18-1.GA_redhat_00001.1.el9eap | 0:7.4.18-1.GA_redhat_00001.1.el9eap |
eap7-wildfly-java-jdk11Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:7.4.18-1.GA_redhat_00001.1.el9eap | 0:7.4.18-1.GA_redhat_00001.1.el9eap |
eap7-wildfly-java-jdk17Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:7.4.18-1.GA_redhat_00001.1.el9eap | 0:7.4.18-1.GA_redhat_00001.1.el9eap |
eap7-wildfly-java-jdk8Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:7.4.18-1.GA_redhat_00001.1.el9eap | 0:7.4.18-1.GA_redhat_00001.1.el9eap |
eap7-wildfly-javadocsRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:7.4.18-1.GA_redhat_00001.1.el9eap | 0:7.4.18-1.GA_redhat_00001.1.el9eap |
eap7-wildfly-modulesRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:7.4.18-1.GA_redhat_00001.1.el9eap | 0:7.4.18-1.GA_redhat_00001.1.el9eap |
undertowUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 1.3.4-11.3.5-11.3.7-11.3.11-11.3.16-11.3.16-1ubuntu0.1~esm1 |
None known |
undertowUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 1.4.20-11.4.21-11.4.22-11.4.23-11.4.23-2build11.4.23-31.4.23-3ubuntu0.1~esm1 |
None known |
undertowUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 2.0.23-12.0.27-12.0.28-12.0.29-12.0.29-1ubuntu0.1~esm1 |
None known |
undertowUbuntu:Pro:22.04:LTS |
All versions, plus listed versions 2.2.8-12.2.12-12.2.13-12.2.14-12.2.16-12.2.16-1ubuntu0.1~esm1 |
None known |
undertowUbuntu:Pro:24.04:LTS |
All versions, plus listed versions 2.3.8-22.3.8-2ubuntu0.1~esm1 |
None known |
undertowUbuntu:25.10 |
All versions, plus listed versions 2.3.18-12.3.18-2 |
None known |
undertowUbuntu:26.10 |
All versions, plus listed versions 2.3.20-1ubuntu1 |
None known |
undertowUbuntu:26.04:LTS |
All versions, plus listed versions 2.3.18-22.3.20-12.3.20-1ubuntu1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| affected, aliases, facts | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-5971 is a high vulnerability (CVSS 7.5) in Red Hat Build Of Apache Camel - Hawtio 4, published July 8, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.92%, the 87th percentile. Fixed in io.undertow:undertow-core 2.3.15.Final.
References
access.redhat.com/errata/RHSA-2024:4392
Show 71 moreShow less
bugzilla.redhat.com/show_bug.cgi?id=2292211
security.netapp.com/advisory/ntap-20240828-0001
nvd.nist.gov/vuln/detail/CVE-2024-5971
github.com/undertow-io/undertow/pull/1638
issues.redhat.com/browse/UNDERTOW-2413
security-tracker.debian.org/tracker/CVE-2024-5971
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_5143.json
cve.org/CVERecord?id=CVE-2024-3653
httpd.apache.org/security/vulnerabilities_24.html
nowotarski.info/http2-continuation-flood
kb.cert.org/vuls/id/421644
gist.github.com/vietj/f558b8ea81ec6505f1e9a6ca283c9ae3
security.snyk.io/vuln/SNYK-JAVA-IONETTY-6483812
people.redhat.com/~hkario/marvin
bouncycastle.org/latest_releases.html
ubuntu.com/security/CVE-2024-5971
This page doesn't list everything
Left out here: 255 versions. The JSON record has them.