CVE-2024-3653
Undertow: learningpushhandler can lead to remote memory dos attacks
5.3 MediumFix available
A vulnerability was found in Undertow. This issue requires enabling the learning-push handler in the server's config, which is disabled by default, leaving the maxAge config in the handler unconfigured. The default is -1, which makes the handler vulnerable. If someone overwrites that config, the server is not subject to the attack. The attacker needs to be able to reach the server with a normal HTTP request.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- Low
Exploit likelihood
1.87%Up 1.8 points since Jul 9, 2024
What each source reports
CVE List Score used
Undertow: learningpushhandler can lead to remote memory dos attacks
A vulnerability was found in Undertow. This issue requires enabling the learning-push handler in the server's config, which is disabled by default, leaving the maxAge config in the handler unconfigured. The default is -1, which makes the handler vulnerable. If someone overwrites that config, the server is not subject to the attack. The attacker needs to be able to reach the server with a normal HTTP request.
- Record
CVE-2024-3653- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Weakness
- CWE-401
- Updated
- 2026-11-06
EUVDEUVD-2024-2322
A vulnerability was found in Undertow. This issue requires enabling the learning-push handler in the server's config, which is disabled by default, leaving the maxAge config in the handler unconfigured. The default is -1, which makes the handler vulnerable. If someone overwrites that config, the server is not subject to the attack. The attacker needs to be able to reach the server with a normal HTTP request.
- Record
EUVD-2024-2322- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-06
GitHub AdvisoriesGHSA-ch7q-gpff-h9hp
Undertow Missing Release of Memory after Effective Lifetime vulnerability
A vulnerability was found in Undertow. This issue requires enabling the learning-push handler in the server's config, which is disabled by default, leaving the maxAge config in the handler unconfigured. The default is -1, which makes the handler vulnerable. If someone overwrites that config, the server is not subject to the attack. The attacker needs to be able to reach the server with a normal HTTP request.
- Record
GHSA-ch7q-gpff-h9hp- CVSS 4.0
- 6.3 Medium
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N - CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Weakness
- CWE-401
- Updated
- 2026-11-02
NVD
A vulnerability was found in Undertow. This issue requires enabling the learning-push handler in the server's config, which is disabled by default, leaving the maxAge config in the handler unconfigured. The default is -1, which makes the handler vulnerable. If someone overwrites that config, the server is not subject to the attack. The attacker needs to be able to reach the server with a normal HTTP request.
- Record
CVE-2024-3653- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Weakness
- CWE-401
- Updated
- 2026-11-06
OSV
Undertow: learningpushhandler can lead to remote memory dos attacks
A vulnerability was found in Undertow. This issue requires enabling the learning-push handler in the server's config, which is disabled by default, leaving the maxAge config in the handler unconfigured. The default is -1, which makes the handler vulnerable. If someone overwrites that config, the server is not subject to the attack. The attacker needs to be able to reach the server with a normal HTTP request.
- Record
CVE-2024-3653- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Weakness
- CWE-401
- Updated
- 2026-11-02
OSVDEBIAN-CVE-2024-3653
A vulnerability was found in Undertow. This issue requires enabling the learning-push handler in the server's config, which is disabled by default, leaving the maxAge config in the handler unconfigured. The default is -1, which makes the handler vulnerable. If someone overwrites that config, the server is not subject to the attack. The attacker needs to be able to reach the server with a normal HTTP request.
- Record
DEBIAN-CVE-2024-3653- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
Show 10 moreShow less
OSVGHSA-ch7q-gpff-h9hp
Undertow Missing Release of Memory after Effective Lifetime vulnerability
A vulnerability was found in Undertow. This issue requires enabling the learning-push handler in the server's config, which is disabled by default, leaving the maxAge config in the handler unconfigured. The default is -1, which makes the handler vulnerable. If someone overwrites that config, the server is not subject to the attack. The attacker needs to be able to reach the server with a normal HTTP request.
- Record
GHSA-ch7q-gpff-h9hp- CVSS 4.0
- 6.3 Medium
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N - CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Weakness
- CWE-401
- Updated
- 2026-11-02
OSVRHLW-2026-f6f1fa9b81c3bbbe
Lightwell Security Advisory: quarkus-http-core 4.1.8.rhlw-00005
Red Hat Lightwell has released io.quarkus.http:quarkus-http-core 4.1.8.rhlw-00005 with backported fixes for CVE-2024-12397 and CVE-2024-3653.
CVE-2024-12397: Io.quarkus.http/quarkus-http-core: quarkus http cookie smuggling
CVE-2024-3653: Undertow: learningpushhandler can lead to remote memory dos attacks
This patched artifact is a drop-in replacement for io.quarkus.http:quarkus-http-core 4.1.8 from Maven Central.
- Record
RHLW-2026-f6f1fa9b81c3bbbe- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2024:5143
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.18 Security update
- Record
RHSA-2024:5143- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2024:5144
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.18 Security update
- Record
RHSA-2024:5144- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2024:5145
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.18 Security update
- Record
RHSA-2024:5145- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2024-3653
A vulnerability was found in Undertow. This issue requires enabling the learning-push handler in the server's config, which is disabled by default, leaving the maxAge config in the handler unconfigured. The default is -1, which makes the handler vulnerable. If someone overwrites that config, the server is not subject to the attack. The attacker needs to be able to reach the server with a normal HTTP request.
- Record
UBUNTU-CVE-2024-3653- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVCLSA-2025-1766534903 No score
TuxCare security update for io.undertow:undertow-core (4 CVEs)
TuxCare rebuilt io.undertow:undertow-core to address 4 CVEs. Fixed in 2.3.10.Final-tuxcare.2.
- Record
CLSA-2025-1766534903- Updated
- 2026-11-02
OSVCLSA-2026-1782349133 No score
TuxCare security update for io.undertow:undertow-core (5 CVEs)
TuxCare rebuilt io.undertow:undertow-core to address 5 CVEs. Fixed in 2.3.0.Final-tuxcare.3.
- Record
CLSA-2026-1782349133- Updated
- 2026-11-02
OSVCLSA-2026-1786429829 No score
TuxCare security update for io.undertow:undertow-core (1 CVE)
TuxCare rebuilt io.undertow:undertow-core to address 1 CVE. Fixed in 2.2.33.Final-tuxcare.6.
- Record
CLSA-2026-1786429829- Updated
- 2026-11-02
OSVCLSA-2026-1793853308 No score
TuxCare security update for io.undertow:undertow-core (6 CVEs)
TuxCare rebuilt io.undertow:undertow-core to address 6 CVEs. Fixed in 1.4.27.Final-tuxcare.3.
- Record
CLSA-2026-1793853308- Updated
- 2026-11-05
Affected products
- red hat openshift serverless
- red hat build of apache camel - hawtio 4
- red hat build of apache camel 4 for quarkus 3
- red hat build of apache camel for spring boot 4
- red hat build of apicurio registry 2
- red hat build of keycloak
- red hat build of optaplanner 8
- red hat build of quarkus
- red hat build of quarkus 3.8.6.redhat
- red hat data grid 8
- red hat fuse 7
- red hat integration camel k 1
Show 12 moreShow less
- red hat integration camel quarkus 2
- red hat jboss data grid 7
- red hat jboss enterprise application platform
- red hat jboss enterprise application platform 7.4 for rhel 8
- red hat jboss enterprise application platform 7.4 for rhel 9
- red hat jboss enterprise application platform 7.4 on rhel 7
- red hat jboss enterprise application platform 8
- red hat jboss enterprise application platform expansion pack
- red hat jboss fuse service works 6
- red hat process automation 7
- red hat single sign-on 7
- red hat streams for apache kafka
Affected packages
| Package | Affected | Fixed |
|---|---|---|
io.undertow:undertow-coreMaven |
2.3.0.Alpha1 up to 2.3.15.Final | 2.3.15.Final |
io.undertow:undertow-coreMaven |
before 2.2.34.Final | 2.2.34.Final |
io.undertow:undertow-coreTuxCare:Maven From an advisory covering 4 CVEs |
2.3.10.Final up to 2.3.10.Final-tuxcare.2, plus listed versions 2.3.10.Final-tuxcare.1 |
2.3.10.Final-tuxcare.2 |
io.undertow:undertow-coreTuxCare:Maven From an advisory covering 5 CVEs |
2.3.0.Final up to 2.3.0.Final-tuxcare.3, plus listed versions 2.3.0.Final-tuxcare.12.3.0.Final-tuxcare.2 |
2.3.0.Final-tuxcare.3 |
io.undertow:undertow-coreTuxCare:Maven |
2.2.33.Final up to 2.2.33.Final-tuxcare.6, plus listed versions 2.2.33.Final-tuxcare.12.2.33.Final-tuxcare.22.2.33.Final-tuxcare.32.2.33.Final-tuxcare.42.2.33.Final-tuxcare.5 |
2.2.33.Final-tuxcare.6 |
io.undertow:undertow-coreTuxCare:Maven From an advisory covering 6 CVEs |
1.4.27.Final up to 1.4.27.Final-tuxcare.3, plus listed versions 1.4.27.Final-tuxcare.11.4.27.Final-tuxcare.2 |
1.4.27.Final-tuxcare.3 |
undertowDebian:14 |
before 2.3.18-1, plus listed versions 1.3.11-11.3.16-11.3.19-11.3.21-11.3.23-1 Show 45 moreShow less1.3.4-11.3.5-11.3.7-11.4.0-11.4.1-11.4.18-11.4.20-11.4.21-11.4.21-21.4.22-11.4.23-11.4.23-21.4.23-31.4.25-11.4.25-21.4.3-11.4.4-11.4.6-11.4.7-11.4.8-12.0.23-12.0.25-12.0.26-12.0.27-12.0.28-12.0.29-12.0.30-12.1.0-12.1.1-12.1.3-12.2.0-12.2.10-12.2.12-12.2.13-12.2.14-12.2.16-12.2.17-12.2.18-12.2.19-12.2.2-12.2.20-12.2.21-12.2.3-12.2.4-12.2.5-1 |
2.3.18-1 |
io.undertow:undertow-coreMaven |
2.3.0.Alpha1 up to 2.3.15.Final, plus listed versions 2.3.0.Alpha22.3.0.Beta12.3.0.Final2.3.1.Final2.3.10.Final Show 12 moreShow less2.3.11.Final2.3.12.Final2.3.13.Final2.3.14.Final2.3.2.Final2.3.3.Final2.3.4.Final2.3.5.Final2.3.6.Final2.3.7.Final2.3.8.Final2.3.9.Final |
2.3.15.Final |
io.undertow:undertow-coreMaven |
before 2.2.34.Final, plus listed versions 1.0.0.Alpha11.0.0.Alpha101.0.0.Alpha111.0.0.Alpha121.0.0.Alpha13 Show 45 moreShow less1.0.0.Alpha141.0.0.Alpha151.0.0.Alpha161.0.0.Alpha171.0.0.Alpha181.0.0.Alpha191.0.0.Alpha21.0.0.Alpha201.0.0.Alpha211.0.0.Alpha221.0.0.Alpha31.0.0.Alpha41.0.0.Alpha51.0.0.Alpha61.0.0.Alpha71.0.0.Alpha81.0.0.Alpha91.0.0.Beta11.0.0.Beta101.0.0.Beta111.0.0.Beta121.0.0.Beta131.0.0.Beta141.0.0.Beta151.0.0.Beta161.0.0.Beta171.0.0.Beta181.0.0.Beta191.0.0.Beta21.0.0.Beta201.0.0.Beta211.0.0.Beta221.0.0.Beta231.0.0.Beta241.0.0.Beta251.0.0.Beta261.0.0.Beta271.0.0.Beta281.0.0.Beta291.0.0.Beta31.0.0.Beta301.0.0.Beta311.0.0.Beta321.0.0.Beta331.0.0.Beta4 |
2.2.34.Final |
io.quarkus.http:quarkus-http-coreRed Hat Lightwell:Maven From an advisory covering 2 CVEs |
before 4.1.8.rhlw-00005, plus listed versions 3.0.0.Alpha13.0.0.Alpha23.0.0.Alpha33.0.0.Alpha43.0.0.Alpha5 Show 40 moreShow less3.0.0.Alpha63.0.0.Alpha73.0.0.Beta13.0.0.Beta23.0.0.Beta33.0.0.Final3.0.1.Final3.0.10.Final3.0.11.Final3.0.12.Final3.0.13.Final3.0.14.Final3.0.15.Final3.0.16.Final3.0.17.Final3.0.18.Final3.0.2.Final3.0.3.Final3.0.4.Final3.0.5.Final3.0.6.Final3.0.7.Final3.0.8.Final3.0.9.Final3.1.0.Beta13.1.0.Beta23.1.0.Final3.1.1.Final4.0.04.0.0.Alpha24.0.0.Alpha34.0.0.Alpha44.1.14.1.24.1.34.1.44.1.54.1.64.1.74.1.8 |
4.1.8.rhlw-00005 |
Show 189 moreShow less
| Package | Affected | Fixed |
|---|---|---|
eap7-undertowRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:2.2.33-1.SP1_redhat_00001.1.el7eap | 0:2.2.33-1.SP1_redhat_00001.1.el7eap |
eap7-bouncycastleRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:1.78.1-1.redhat_00002.1.el7eap | 0:1.78.1-1.redhat_00002.1.el7eap |
eap7-bouncycastle-mailRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:1.78.1-1.redhat_00002.1.el7eap | 0:1.78.1-1.redhat_00002.1.el7eap |
eap7-bouncycastle-pgRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:1.78.1-1.redhat_00002.1.el7eap | 0:1.78.1-1.redhat_00002.1.el7eap |
eap7-bouncycastle-pkixRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:1.78.1-1.redhat_00002.1.el7eap | 0:1.78.1-1.redhat_00002.1.el7eap |
eap7-bouncycastle-provRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:1.78.1-1.redhat_00002.1.el7eap | 0:1.78.1-1.redhat_00002.1.el7eap |
eap7-bouncycastle-utilRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:1.78.1-1.redhat_00002.1.el7eap | 0:1.78.1-1.redhat_00002.1.el7eap |
eap7-hal-consoleRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:3.3.23-1.Final_redhat_00001.1.el7eap | 0:3.3.23-1.Final_redhat_00001.1.el7eap |
eap7-ironjacamarRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:1.5.17-1.Final_redhat_00001.1.el7eap | 0:1.5.17-1.Final_redhat_00001.1.el7eap |
eap7-ironjacamar-common-apiRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:1.5.17-1.Final_redhat_00001.1.el7eap | 0:1.5.17-1.Final_redhat_00001.1.el7eap |
eap7-ironjacamar-common-implRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:1.5.17-1.Final_redhat_00001.1.el7eap | 0:1.5.17-1.Final_redhat_00001.1.el7eap |
eap7-ironjacamar-common-spiRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:1.5.17-1.Final_redhat_00001.1.el7eap | 0:1.5.17-1.Final_redhat_00001.1.el7eap |
eap7-ironjacamar-core-apiRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:1.5.17-1.Final_redhat_00001.1.el7eap | 0:1.5.17-1.Final_redhat_00001.1.el7eap |
eap7-ironjacamar-core-implRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:1.5.17-1.Final_redhat_00001.1.el7eap | 0:1.5.17-1.Final_redhat_00001.1.el7eap |
eap7-ironjacamar-deployers-commonRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:1.5.17-1.Final_redhat_00001.1.el7eap | 0:1.5.17-1.Final_redhat_00001.1.el7eap |
eap7-ironjacamar-jdbcRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:1.5.17-1.Final_redhat_00001.1.el7eap | 0:1.5.17-1.Final_redhat_00001.1.el7eap |
eap7-ironjacamar-validatorRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:1.5.17-1.Final_redhat_00001.1.el7eap | 0:1.5.17-1.Final_redhat_00001.1.el7eap |
eap7-jandexRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:2.4.5-1.Final_redhat_00001.1.el7eap | 0:2.4.5-1.Final_redhat_00001.1.el7eap |
eap7-jboss-remotingRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:5.0.29-1.Final_redhat_00001.1.el7eap | 0:5.0.29-1.Final_redhat_00001.1.el7eap |
eap7-jboss-server-migrationRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:1.10.0-37.Final_redhat_00037.1.el7eap | 0:1.10.0-37.Final_redhat_00037.1.el7eap |
eap7-jboss-server-migration-cliRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:1.10.0-37.Final_redhat_00037.1.el7eap | 0:1.10.0-37.Final_redhat_00037.1.el7eap |
eap7-jboss-server-migration-coreRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:1.10.0-37.Final_redhat_00037.1.el7eap | 0:1.10.0-37.Final_redhat_00037.1.el7eap |
eap7-jboss-xnio-baseRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:3.8.16-1.Final_redhat_00001.1.el7eap | 0:3.8.16-1.Final_redhat_00001.1.el7eap |
eap7-log4j-jboss-logmanagerRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:1.3.1-1.Final_redhat_00002.1.el7eap | 0:1.3.1-1.Final_redhat_00002.1.el7eap |
eap7-nettyRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el7eap | 0:4.1.108-1.Final_redhat_00001.1.el7eap |
eap7-netty-allRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el7eap | 0:4.1.108-1.Final_redhat_00001.1.el7eap |
eap7-netty-bufferRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el7eap | 0:4.1.108-1.Final_redhat_00001.1.el7eap |
eap7-netty-codecRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el7eap | 0:4.1.108-1.Final_redhat_00001.1.el7eap |
eap7-netty-codec-dnsRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el7eap | 0:4.1.108-1.Final_redhat_00001.1.el7eap |
eap7-netty-codec-haproxyRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el7eap | 0:4.1.108-1.Final_redhat_00001.1.el7eap |
eap7-netty-codec-httpRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el7eap | 0:4.1.108-1.Final_redhat_00001.1.el7eap |
eap7-netty-codec-http2Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el7eap | 0:4.1.108-1.Final_redhat_00001.1.el7eap |
eap7-netty-codec-memcacheRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el7eap | 0:4.1.108-1.Final_redhat_00001.1.el7eap |
eap7-netty-codec-mqttRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el7eap | 0:4.1.108-1.Final_redhat_00001.1.el7eap |
eap7-netty-codec-redisRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el7eap | 0:4.1.108-1.Final_redhat_00001.1.el7eap |
eap7-netty-codec-smtpRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el7eap | 0:4.1.108-1.Final_redhat_00001.1.el7eap |
eap7-netty-codec-socksRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el7eap | 0:4.1.108-1.Final_redhat_00001.1.el7eap |
eap7-netty-codec-stompRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el7eap | 0:4.1.108-1.Final_redhat_00001.1.el7eap |
eap7-netty-codec-xmlRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el7eap | 0:4.1.108-1.Final_redhat_00001.1.el7eap |
eap7-netty-commonRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el7eap | 0:4.1.108-1.Final_redhat_00001.1.el7eap |
eap7-netty-handlerRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el7eap | 0:4.1.108-1.Final_redhat_00001.1.el7eap |
eap7-netty-handler-proxyRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el7eap | 0:4.1.108-1.Final_redhat_00001.1.el7eap |
eap7-netty-resolverRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el7eap | 0:4.1.108-1.Final_redhat_00001.1.el7eap |
eap7-netty-resolver-dnsRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el7eap | 0:4.1.108-1.Final_redhat_00001.1.el7eap |
eap7-netty-resolver-dns-classes-macosRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el7eap | 0:4.1.108-1.Final_redhat_00001.1.el7eap |
eap7-netty-transportRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el7eap | 0:4.1.108-1.Final_redhat_00001.1.el7eap |
eap7-netty-transport-classes-epollRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el7eap | 0:4.1.108-1.Final_redhat_00001.1.el7eap |
eap7-netty-transport-classes-kqueueRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el7eap | 0:4.1.108-1.Final_redhat_00001.1.el7eap |
eap7-netty-transport-native-epollRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el7eap | 0:4.1.108-1.Final_redhat_00001.1.el7eap |
eap7-netty-transport-native-epoll-debuginfoRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el7eap | 0:4.1.108-1.Final_redhat_00001.1.el7eap |
eap7-netty-transport-native-unix-commonRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el7eap | 0:4.1.108-1.Final_redhat_00001.1.el7eap |
eap7-netty-transport-rxtxRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el7eap | 0:4.1.108-1.Final_redhat_00001.1.el7eap |
eap7-netty-transport-sctpRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el7eap | 0:4.1.108-1.Final_redhat_00001.1.el7eap |
eap7-netty-transport-udtRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el7eap | 0:4.1.108-1.Final_redhat_00001.1.el7eap |
eap7-netty-xnio-transportRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:0.1.10-1.Final_redhat_00001.1.el7eap | 0:0.1.10-1.Final_redhat_00001.1.el7eap |
eap7-wildflyRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:7.4.18-1.GA_redhat_00001.1.el7eap | 0:7.4.18-1.GA_redhat_00001.1.el7eap |
eap7-wildfly-java-jdk11Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:7.4.18-1.GA_redhat_00001.1.el7eap | 0:7.4.18-1.GA_redhat_00001.1.el7eap |
eap7-wildfly-java-jdk8Red Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:7.4.18-1.GA_redhat_00001.1.el7eap | 0:7.4.18-1.GA_redhat_00001.1.el7eap |
eap7-wildfly-javadocsRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:7.4.18-1.GA_redhat_00001.1.el7eap | 0:7.4.18-1.GA_redhat_00001.1.el7eap |
eap7-wildfly-modulesRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 7 CVEs |
before 0:7.4.18-1.GA_redhat_00001.1.el7eap | 0:7.4.18-1.GA_redhat_00001.1.el7eap |
eap7-undertowRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:2.2.33-1.SP1_redhat_00001.1.el8eap | 0:2.2.33-1.SP1_redhat_00001.1.el8eap |
eap7-bouncycastleRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:1.78.1-1.redhat_00002.1.el8eap | 0:1.78.1-1.redhat_00002.1.el8eap |
eap7-bouncycastle-mailRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:1.78.1-1.redhat_00002.1.el8eap | 0:1.78.1-1.redhat_00002.1.el8eap |
eap7-bouncycastle-pgRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:1.78.1-1.redhat_00002.1.el8eap | 0:1.78.1-1.redhat_00002.1.el8eap |
eap7-bouncycastle-pkixRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:1.78.1-1.redhat_00002.1.el8eap | 0:1.78.1-1.redhat_00002.1.el8eap |
eap7-bouncycastle-provRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:1.78.1-1.redhat_00002.1.el8eap | 0:1.78.1-1.redhat_00002.1.el8eap |
eap7-bouncycastle-utilRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:1.78.1-1.redhat_00002.1.el8eap | 0:1.78.1-1.redhat_00002.1.el8eap |
eap7-hal-consoleRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:3.3.23-1.Final_redhat_00001.1.el8eap | 0:3.3.23-1.Final_redhat_00001.1.el8eap |
eap7-ironjacamarRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:1.5.17-1.Final_redhat_00001.1.el8eap | 0:1.5.17-1.Final_redhat_00001.1.el8eap |
eap7-ironjacamar-common-apiRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:1.5.17-1.Final_redhat_00001.1.el8eap | 0:1.5.17-1.Final_redhat_00001.1.el8eap |
eap7-ironjacamar-common-implRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:1.5.17-1.Final_redhat_00001.1.el8eap | 0:1.5.17-1.Final_redhat_00001.1.el8eap |
eap7-ironjacamar-common-spiRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:1.5.17-1.Final_redhat_00001.1.el8eap | 0:1.5.17-1.Final_redhat_00001.1.el8eap |
eap7-ironjacamar-core-apiRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:1.5.17-1.Final_redhat_00001.1.el8eap | 0:1.5.17-1.Final_redhat_00001.1.el8eap |
eap7-ironjacamar-core-implRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:1.5.17-1.Final_redhat_00001.1.el8eap | 0:1.5.17-1.Final_redhat_00001.1.el8eap |
eap7-ironjacamar-deployers-commonRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:1.5.17-1.Final_redhat_00001.1.el8eap | 0:1.5.17-1.Final_redhat_00001.1.el8eap |
eap7-ironjacamar-jdbcRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:1.5.17-1.Final_redhat_00001.1.el8eap | 0:1.5.17-1.Final_redhat_00001.1.el8eap |
eap7-ironjacamar-validatorRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:1.5.17-1.Final_redhat_00001.1.el8eap | 0:1.5.17-1.Final_redhat_00001.1.el8eap |
eap7-jandexRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:2.4.5-1.Final_redhat_00001.1.el8eap | 0:2.4.5-1.Final_redhat_00001.1.el8eap |
eap7-jboss-remotingRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:5.0.29-1.Final_redhat_00001.1.el8eap | 0:5.0.29-1.Final_redhat_00001.1.el8eap |
eap7-jboss-server-migrationRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:1.10.0-37.Final_redhat_00037.1.el8eap | 0:1.10.0-37.Final_redhat_00037.1.el8eap |
eap7-jboss-server-migration-cliRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:1.10.0-37.Final_redhat_00037.1.el8eap | 0:1.10.0-37.Final_redhat_00037.1.el8eap |
eap7-jboss-server-migration-coreRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:1.10.0-37.Final_redhat_00037.1.el8eap | 0:1.10.0-37.Final_redhat_00037.1.el8eap |
eap7-jboss-xnio-baseRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:3.8.16-1.Final_redhat_00001.1.el8eap | 0:3.8.16-1.Final_redhat_00001.1.el8eap |
eap7-log4j-jboss-logmanagerRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:1.3.1-1.Final_redhat_00002.1.el8eap | 0:1.3.1-1.Final_redhat_00002.1.el8eap |
eap7-nettyRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el8eap | 0:4.1.108-1.Final_redhat_00001.1.el8eap |
eap7-netty-allRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el8eap | 0:4.1.108-1.Final_redhat_00001.1.el8eap |
eap7-netty-bufferRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el8eap | 0:4.1.108-1.Final_redhat_00001.1.el8eap |
eap7-netty-codecRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el8eap | 0:4.1.108-1.Final_redhat_00001.1.el8eap |
eap7-netty-codec-dnsRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el8eap | 0:4.1.108-1.Final_redhat_00001.1.el8eap |
eap7-netty-codec-haproxyRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el8eap | 0:4.1.108-1.Final_redhat_00001.1.el8eap |
eap7-netty-codec-httpRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el8eap | 0:4.1.108-1.Final_redhat_00001.1.el8eap |
eap7-netty-codec-http2Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el8eap | 0:4.1.108-1.Final_redhat_00001.1.el8eap |
eap7-netty-codec-memcacheRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el8eap | 0:4.1.108-1.Final_redhat_00001.1.el8eap |
eap7-netty-codec-mqttRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el8eap | 0:4.1.108-1.Final_redhat_00001.1.el8eap |
eap7-netty-codec-redisRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el8eap | 0:4.1.108-1.Final_redhat_00001.1.el8eap |
eap7-netty-codec-smtpRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el8eap | 0:4.1.108-1.Final_redhat_00001.1.el8eap |
eap7-netty-codec-socksRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el8eap | 0:4.1.108-1.Final_redhat_00001.1.el8eap |
eap7-netty-codec-stompRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el8eap | 0:4.1.108-1.Final_redhat_00001.1.el8eap |
eap7-netty-codec-xmlRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el8eap | 0:4.1.108-1.Final_redhat_00001.1.el8eap |
eap7-netty-commonRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el8eap | 0:4.1.108-1.Final_redhat_00001.1.el8eap |
eap7-netty-handlerRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el8eap | 0:4.1.108-1.Final_redhat_00001.1.el8eap |
eap7-netty-handler-proxyRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el8eap | 0:4.1.108-1.Final_redhat_00001.1.el8eap |
eap7-netty-resolverRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el8eap | 0:4.1.108-1.Final_redhat_00001.1.el8eap |
eap7-netty-resolver-dnsRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el8eap | 0:4.1.108-1.Final_redhat_00001.1.el8eap |
eap7-netty-resolver-dns-classes-macosRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el8eap | 0:4.1.108-1.Final_redhat_00001.1.el8eap |
eap7-netty-transportRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el8eap | 0:4.1.108-1.Final_redhat_00001.1.el8eap |
eap7-netty-transport-classes-epollRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el8eap | 0:4.1.108-1.Final_redhat_00001.1.el8eap |
eap7-netty-transport-classes-kqueueRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el8eap | 0:4.1.108-1.Final_redhat_00001.1.el8eap |
eap7-netty-transport-native-epollRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el8eap | 0:4.1.108-1.Final_redhat_00001.1.el8eap |
eap7-netty-transport-native-epoll-debuginfoRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el8eap | 0:4.1.108-1.Final_redhat_00001.1.el8eap |
eap7-netty-transport-native-unix-commonRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el8eap | 0:4.1.108-1.Final_redhat_00001.1.el8eap |
eap7-netty-transport-rxtxRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el8eap | 0:4.1.108-1.Final_redhat_00001.1.el8eap |
eap7-netty-transport-sctpRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el8eap | 0:4.1.108-1.Final_redhat_00001.1.el8eap |
eap7-netty-transport-udtRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el8eap | 0:4.1.108-1.Final_redhat_00001.1.el8eap |
eap7-netty-xnio-transportRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:0.1.10-1.Final_redhat_00001.1.el8eap | 0:0.1.10-1.Final_redhat_00001.1.el8eap |
eap7-wildflyRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:7.4.18-1.GA_redhat_00001.1.el8eap | 0:7.4.18-1.GA_redhat_00001.1.el8eap |
eap7-wildfly-java-jdk11Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:7.4.18-1.GA_redhat_00001.1.el8eap | 0:7.4.18-1.GA_redhat_00001.1.el8eap |
eap7-wildfly-java-jdk17Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:7.4.18-1.GA_redhat_00001.1.el8eap | 0:7.4.18-1.GA_redhat_00001.1.el8eap |
eap7-wildfly-java-jdk8Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:7.4.18-1.GA_redhat_00001.1.el8eap | 0:7.4.18-1.GA_redhat_00001.1.el8eap |
eap7-wildfly-javadocsRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:7.4.18-1.GA_redhat_00001.1.el8eap | 0:7.4.18-1.GA_redhat_00001.1.el8eap |
eap7-wildfly-modulesRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 7 CVEs |
before 0:7.4.18-1.GA_redhat_00001.1.el8eap | 0:7.4.18-1.GA_redhat_00001.1.el8eap |
eap7-undertowRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:2.2.33-1.SP1_redhat_00001.1.el9eap | 0:2.2.33-1.SP1_redhat_00001.1.el9eap |
eap7-bouncycastleRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:1.78.1-1.redhat_00002.1.el9eap | 0:1.78.1-1.redhat_00002.1.el9eap |
eap7-bouncycastle-mailRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:1.78.1-1.redhat_00002.1.el9eap | 0:1.78.1-1.redhat_00002.1.el9eap |
eap7-bouncycastle-pgRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:1.78.1-1.redhat_00002.1.el9eap | 0:1.78.1-1.redhat_00002.1.el9eap |
eap7-bouncycastle-pkixRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:1.78.1-1.redhat_00002.1.el9eap | 0:1.78.1-1.redhat_00002.1.el9eap |
eap7-bouncycastle-provRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:1.78.1-1.redhat_00002.1.el9eap | 0:1.78.1-1.redhat_00002.1.el9eap |
eap7-bouncycastle-utilRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:1.78.1-1.redhat_00002.1.el9eap | 0:1.78.1-1.redhat_00002.1.el9eap |
eap7-hal-consoleRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:3.3.23-1.Final_redhat_00001.1.el9eap | 0:3.3.23-1.Final_redhat_00001.1.el9eap |
eap7-ironjacamarRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:1.5.17-1.Final_redhat_00001.1.el9eap | 0:1.5.17-1.Final_redhat_00001.1.el9eap |
eap7-ironjacamar-common-apiRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:1.5.17-1.Final_redhat_00001.1.el9eap | 0:1.5.17-1.Final_redhat_00001.1.el9eap |
eap7-ironjacamar-common-implRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:1.5.17-1.Final_redhat_00001.1.el9eap | 0:1.5.17-1.Final_redhat_00001.1.el9eap |
eap7-ironjacamar-common-spiRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:1.5.17-1.Final_redhat_00001.1.el9eap | 0:1.5.17-1.Final_redhat_00001.1.el9eap |
eap7-ironjacamar-core-apiRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:1.5.17-1.Final_redhat_00001.1.el9eap | 0:1.5.17-1.Final_redhat_00001.1.el9eap |
eap7-ironjacamar-core-implRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:1.5.17-1.Final_redhat_00001.1.el9eap | 0:1.5.17-1.Final_redhat_00001.1.el9eap |
eap7-ironjacamar-deployers-commonRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:1.5.17-1.Final_redhat_00001.1.el9eap | 0:1.5.17-1.Final_redhat_00001.1.el9eap |
eap7-ironjacamar-jdbcRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:1.5.17-1.Final_redhat_00001.1.el9eap | 0:1.5.17-1.Final_redhat_00001.1.el9eap |
eap7-ironjacamar-validatorRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:1.5.17-1.Final_redhat_00001.1.el9eap | 0:1.5.17-1.Final_redhat_00001.1.el9eap |
eap7-jandexRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:2.4.5-1.Final_redhat_00001.1.el9eap | 0:2.4.5-1.Final_redhat_00001.1.el9eap |
eap7-jboss-remotingRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:5.0.29-1.Final_redhat_00001.1.el9eap | 0:5.0.29-1.Final_redhat_00001.1.el9eap |
eap7-jboss-server-migrationRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:1.10.0-37.Final_redhat_00037.1.el9eap | 0:1.10.0-37.Final_redhat_00037.1.el9eap |
eap7-jboss-server-migration-cliRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:1.10.0-37.Final_redhat_00037.1.el9eap | 0:1.10.0-37.Final_redhat_00037.1.el9eap |
eap7-jboss-server-migration-coreRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:1.10.0-37.Final_redhat_00037.1.el9eap | 0:1.10.0-37.Final_redhat_00037.1.el9eap |
eap7-jboss-xnio-baseRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:3.8.16-1.Final_redhat_00001.1.el9eap | 0:3.8.16-1.Final_redhat_00001.1.el9eap |
eap7-log4j-jboss-logmanagerRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:1.3.1-1.Final_redhat_00002.1.el9eap | 0:1.3.1-1.Final_redhat_00002.1.el9eap |
eap7-nettyRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el9eap | 0:4.1.108-1.Final_redhat_00001.1.el9eap |
eap7-netty-bufferRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el9eap | 0:4.1.108-1.Final_redhat_00001.1.el9eap |
eap7-netty-codecRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el9eap | 0:4.1.108-1.Final_redhat_00001.1.el9eap |
eap7-netty-codec-dnsRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el9eap | 0:4.1.108-1.Final_redhat_00001.1.el9eap |
eap7-netty-codec-haproxyRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el9eap | 0:4.1.108-1.Final_redhat_00001.1.el9eap |
eap7-netty-codec-httpRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el9eap | 0:4.1.108-1.Final_redhat_00001.1.el9eap |
eap7-netty-codec-http2Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el9eap | 0:4.1.108-1.Final_redhat_00001.1.el9eap |
eap7-netty-codec-memcacheRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el9eap | 0:4.1.108-1.Final_redhat_00001.1.el9eap |
eap7-netty-codec-mqttRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el9eap | 0:4.1.108-1.Final_redhat_00001.1.el9eap |
eap7-netty-codec-redisRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el9eap | 0:4.1.108-1.Final_redhat_00001.1.el9eap |
eap7-netty-codec-smtpRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el9eap | 0:4.1.108-1.Final_redhat_00001.1.el9eap |
eap7-netty-codec-socksRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el9eap | 0:4.1.108-1.Final_redhat_00001.1.el9eap |
eap7-netty-codec-stompRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el9eap | 0:4.1.108-1.Final_redhat_00001.1.el9eap |
eap7-netty-codec-xmlRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el9eap | 0:4.1.108-1.Final_redhat_00001.1.el9eap |
eap7-netty-commonRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el9eap | 0:4.1.108-1.Final_redhat_00001.1.el9eap |
eap7-netty-handlerRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el9eap | 0:4.1.108-1.Final_redhat_00001.1.el9eap |
eap7-netty-handler-proxyRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el9eap | 0:4.1.108-1.Final_redhat_00001.1.el9eap |
eap7-netty-resolverRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el9eap | 0:4.1.108-1.Final_redhat_00001.1.el9eap |
eap7-netty-resolver-dnsRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el9eap | 0:4.1.108-1.Final_redhat_00001.1.el9eap |
eap7-netty-resolver-dns-classes-macosRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el9eap | 0:4.1.108-1.Final_redhat_00001.1.el9eap |
eap7-netty-transportRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el9eap | 0:4.1.108-1.Final_redhat_00001.1.el9eap |
eap7-netty-transport-classes-epollRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el9eap | 0:4.1.108-1.Final_redhat_00001.1.el9eap |
eap7-netty-transport-classes-kqueueRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el9eap | 0:4.1.108-1.Final_redhat_00001.1.el9eap |
eap7-netty-transport-native-epollRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el9eap | 0:4.1.108-1.Final_redhat_00001.1.el9eap |
eap7-netty-transport-native-epoll-debuginfoRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el9eap | 0:4.1.108-1.Final_redhat_00001.1.el9eap |
eap7-netty-transport-native-unix-commonRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el9eap | 0:4.1.108-1.Final_redhat_00001.1.el9eap |
eap7-netty-transport-rxtxRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el9eap | 0:4.1.108-1.Final_redhat_00001.1.el9eap |
eap7-netty-transport-sctpRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el9eap | 0:4.1.108-1.Final_redhat_00001.1.el9eap |
eap7-netty-transport-udtRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:4.1.108-1.Final_redhat_00001.1.el9eap | 0:4.1.108-1.Final_redhat_00001.1.el9eap |
eap7-netty-xnio-transportRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:0.1.10-1.Final_redhat_00001.1.el9eap | 0:0.1.10-1.Final_redhat_00001.1.el9eap |
eap7-wildflyRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:7.4.18-1.GA_redhat_00001.1.el9eap | 0:7.4.18-1.GA_redhat_00001.1.el9eap |
eap7-wildfly-java-jdk11Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:7.4.18-1.GA_redhat_00001.1.el9eap | 0:7.4.18-1.GA_redhat_00001.1.el9eap |
eap7-wildfly-java-jdk17Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:7.4.18-1.GA_redhat_00001.1.el9eap | 0:7.4.18-1.GA_redhat_00001.1.el9eap |
eap7-wildfly-java-jdk8Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:7.4.18-1.GA_redhat_00001.1.el9eap | 0:7.4.18-1.GA_redhat_00001.1.el9eap |
eap7-wildfly-javadocsRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:7.4.18-1.GA_redhat_00001.1.el9eap | 0:7.4.18-1.GA_redhat_00001.1.el9eap |
eap7-wildfly-modulesRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 7 CVEs |
before 0:7.4.18-1.GA_redhat_00001.1.el9eap | 0:7.4.18-1.GA_redhat_00001.1.el9eap |
undertowUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 1.3.4-11.3.5-11.3.7-11.3.11-11.3.16-11.3.16-1ubuntu0.1~esm1 |
None known |
undertowUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 1.4.20-11.4.21-11.4.22-11.4.23-11.4.23-2build11.4.23-31.4.23-3ubuntu0.1~esm1 |
None known |
undertowUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 2.0.23-12.0.27-12.0.28-12.0.29-12.0.29-1ubuntu0.1~esm1 |
None known |
undertowUbuntu:Pro:22.04:LTS |
All versions, plus listed versions 2.2.8-12.2.12-12.2.13-12.2.14-12.2.16-12.2.16-1ubuntu0.1~esm1 |
None known |
undertowUbuntu:Pro:24.04:LTS |
All versions, plus listed versions 2.3.8-22.3.8-2ubuntu0.1~esm1 |
None known |
undertowUbuntu:25.10 |
All versions, plus listed versions 2.3.18-12.3.18-2 |
None known |
undertowUbuntu:26.10 |
All versions, plus listed versions 2.3.20-1ubuntu1 |
None known |
undertowUbuntu:26.04:LTS |
All versions, plus listed versions 2.3.18-22.3.20-12.3.20-1ubuntu1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| affected, aliases | OSV | |
| facts | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-3653 is a medium vulnerability (CVSS 5.3) in Red Hat Openshift Serverless, published July 8, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.87%, the 79th percentile. Fixed in io.undertow:undertow-core 2.3.15.Final.
References
access.redhat.com/errata/RHSA-2024:4392
Show 77 moreShow less
bugzilla.redhat.com/show_bug.cgi?id=2274437
security.netapp.com/advisory/ntap-20240828-0002
nvd.nist.gov/vuln/detail/CVE-2024-3653
github.com/undertow-io/undertow/pull/1639
issues.redhat.com/browse/UNDERTOW-2382
security-tracker.debian.org/tracker/CVE-2024-3653
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_5143.json
cve.org/CVERecord?id=CVE-2024-3653
httpd.apache.org/security/vulnerabilities_24.html
nowotarski.info/http2-continuation-flood
kb.cert.org/vuls/id/421644
gist.github.com/vietj/f558b8ea81ec6505f1e9a6ca283c9ae3
security.snyk.io/vuln/SNYK-JAVA-IONETTY-6483812
people.redhat.com/~hkario/marvin
bouncycastle.org/latest_releases.html
ubuntu.com/security/CVE-2024-3653
This page doesn't list everything
Left out here: 255 versions. The JSON record has them.