CVE-2024-7885
Undertow: improper state management in proxy protocol parsing causes information leakage
7.5 HighFix available
A vulnerability was found in Undertow where the ProxyProtocolReadListener reuses the same StringBuilder instance across multiple requests. This issue occurs when the parseProxyProtocolV1 method processes multiple requests on the same HTTP connection. As a result, different requests may share the same StringBuilder instance, potentially leading to information leakage between requests or responses. In some cases, a value from a previous request or response may be erroneously reused, which could lead to unintended data exposure. This issue primarily results in errors and connection termination but creates a risk of data leakage in multi-request environments.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
2.64%Up 2.6 points since Aug 22, 2024
What each source reports
CVE List Score used
Undertow: improper state management in proxy protocol parsing causes information leakage
A vulnerability was found in Undertow where the ProxyProtocolReadListener reuses the same StringBuilder instance across multiple requests. This issue occurs when the parseProxyProtocolV1 method processes multiple requests on the same HTTP connection. As a result, different requests may share the same StringBuilder instance, potentially leading to information leakage between requests or responses. In some cases, a value from a previous request or response may be erroneously reused, which could lead to unintended data exposure. This issue primarily results in errors and connection termination but creates a risk of data leakage in multi-request environments.
- Record
CVE-2024-7885- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-362
- Updated
- 2026-11-04
EUVDEUVD-2024-2542
A vulnerability was found in Undertow where the ProxyProtocolReadListener reuses the same StringBuilder instance across multiple requests. This issue occurs when the parseProxyProtocolV1 method processes multiple requests on the same HTTP connection. As a result, different requests may share the same StringBuilder instance, potentially leading to information leakage between requests or responses. In some cases, a value from a previous request or response may be erroneously reused, which could lead to unintended data exposure. This issue primarily results in errors and connection termination but creates a risk of data leakage in multi-request environments.
- Record
EUVD-2024-2542- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-04
GitHub AdvisoriesGHSA-9623-mqmm-5rcf
Undertow vulnerable to Race Condition
A vulnerability was found in Undertow where the ProxyProtocolReadListener reuses the same StringBuilder instance across multiple requests. This issue occurs when the parseProxyProtocolV1 method processes multiple requests on the same HTTP connection. As a result, different requests may share the same StringBuilder instance, potentially leading to information leakage between requests or responses. In some cases, a value from a previous request or response may be erroneously reused, which could lead to unintended data exposure. This issue primarily results in errors and connection termination but creates a risk of data leakage in multi-request environments.
- Record
GHSA-9623-mqmm-5rcf- CVSS 4.0
- 8.7 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N - CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-362
- Updated
- 2026-11-02
NVD
A vulnerability was found in Undertow where the ProxyProtocolReadListener reuses the same StringBuilder instance across multiple requests. This issue occurs when the parseProxyProtocolV1 method processes multiple requests on the same HTTP connection. As a result, different requests may share the same StringBuilder instance, potentially leading to information leakage between requests or responses. In some cases, a value from a previous request or response may be erroneously reused, which could lead to unintended data exposure. This issue primarily results in errors and connection termination but creates a risk of data leakage in multi-request environments.
- Record
CVE-2024-7885- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-362
- Updated
- 2026-11-04
OSV
Undertow: improper state management in proxy protocol parsing causes information leakage
A vulnerability was found in Undertow where the ProxyProtocolReadListener reuses the same StringBuilder instance across multiple requests. This issue occurs when the parseProxyProtocolV1 method processes multiple requests on the same HTTP connection. As a result, different requests may share the same StringBuilder instance, potentially leading to information leakage between requests or responses. In some cases, a value from a previous request or response may be erroneously reused, which could lead to unintended data exposure. This issue primarily results in errors and connection termination but creates a risk of data leakage in multi-request environments.
- Record
CVE-2024-7885- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-362
- Updated
- 2026-11-05
OSVDEBIAN-CVE-2024-7885
A vulnerability was found in Undertow where the ProxyProtocolReadListener reuses the same StringBuilder instance across multiple requests. This issue occurs when the parseProxyProtocolV1 method processes multiple requests on the same HTTP connection. As a result, different requests may share the same StringBuilder instance, potentially leading to information leakage between requests or responses. In some cases, a value from a previous request or response may be erroneously reused, which could lead to unintended data exposure. This issue primarily results in errors and connection termination but creates a risk of data leakage in multi-request environments.
- Record
DEBIAN-CVE-2024-7885- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-05
Show 10 moreShow less
OSVGHSA-9623-mqmm-5rcf
Undertow vulnerable to Race Condition
A vulnerability was found in Undertow where the ProxyProtocolReadListener reuses the same StringBuilder instance across multiple requests. This issue occurs when the parseProxyProtocolV1 method processes multiple requests on the same HTTP connection. As a result, different requests may share the same StringBuilder instance, potentially leading to information leakage between requests or responses. In some cases, a value from a previous request or response may be erroneously reused, which could lead to unintended data exposure. This issue primarily results in errors and connection termination but creates a risk of data leakage in multi-request environments.
- Record
GHSA-9623-mqmm-5rcf- CVSS 4.0
- 8.7 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N - CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-362
- Updated
- 2026-11-02
OSVRHSA-2024:7441
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0 security update
- Record
RHSA-2024:7441- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2024:7736
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4 Security update
- Record
RHSA-2024:7736- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2025:16667
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.15 security update
- Record
RHSA-2025:16667- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2026:0743
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.16 security update
- Record
RHSA-2026:0743- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2024-7885
A vulnerability was found in Undertow where the ProxyProtocolReadListener reuses the same StringBuilder instance across multiple requests. This issue occurs when the parseProxyProtocolV1 method processes multiple requests on the same HTTP connection. As a result, different requests may share the same StringBuilder instance, potentially leading to information leakage between requests or responses. In some cases, a value from a previous request or response may be erroneously reused, which could lead to unintended data exposure. This issue primarily results in errors and connection termination but creates a risk of data leakage in multi-request environments.
- Record
UBUNTU-CVE-2024-7885- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVCLSA-2025-1762992412 No score
TuxCare security update for io.undertow:undertow-core (1 CVE)
TuxCare rebuilt io.undertow:undertow-core to address 1 CVE. Fixed in 2.2.33.Final-tuxcare.1.
- Record
CLSA-2025-1762992412- Updated
- 2026-11-02
OSVCLSA-2025-1766016491 No score
TuxCare security update for io.undertow:undertow-core (4 CVEs)
TuxCare rebuilt io.undertow:undertow-core to address 4 CVEs. Fixed in 2.3.10.Final-tuxcare.1.
- Record
CLSA-2025-1766016491- Updated
- 2026-11-02
OSVCLSA-2026-1780966317 No score
TuxCare security update for io.undertow:undertow-core (4 CVEs)
TuxCare rebuilt io.undertow:undertow-core to address 4 CVEs. Fixed in 2.3.0.Final-tuxcare.1.
- Record
CLSA-2026-1780966317- Updated
- 2026-11-02
OSVCLSA-2026-1787137111 No score
TuxCare security update for io.undertow:undertow-core (6 CVEs)
TuxCare rebuilt io.undertow:undertow-core to address 6 CVEs. Fixed in 2.2.24.Final-tuxcare.1.
- Record
CLSA-2026-1787137111- Updated
- 2026-11-02
Affected products
- red hat hawtio 4.0.0 for red hat build of apache camel 4
- red hat build of apache camel 3.20.7 for spring boot
- red hat build of apache camel 4.4.2 for spring boot
- red hat build of apache camel for spring boot 3
- red hat build of keycloak
- red hat build of quarkus
- red hat data grid 8
- red hat fuse 7
- red hat integration camel k 1
- red hat jboss data grid 7
- red hat jboss enterprise application platform
- red hat jboss enterprise application platform 7
Show 19 moreShow less
- red hat jboss enterprise application platform 7.3 eus for rhel 7
- red hat jboss enterprise application platform 7.4 for rhel 8
- red hat jboss enterprise application platform 7.4 for rhel 9
- red hat jboss enterprise application platform 7.4 on rhel 7
- red hat jboss enterprise application platform 8
- red hat jboss enterprise application platform 8.0 for rhel 8
- red hat jboss enterprise application platform 8.0 for rhel 9
- red hat jboss enterprise application platform expansion pack
- red hat process automation 7
- red hat single sign-on 7
- redhat build of apache camel - hawtio
- redhat build of apache camel for spring boot
- redhat build of keycloak
- redhat data grid
- redhat integration camel k
- redhat jboss enterprise application platform
- redhat jboss fuse
- redhat process automation
- redhat single sign-on
Affected packages
| Package | Affected | Fixed |
|---|---|---|
io.undertow:undertow-coreMaven |
before 2.2.36.Final | 2.2.36.Final |
io.undertow:undertow-coreMaven |
2.3.0.Alpha1 up to 2.3.17.Final | 2.3.17.Final |
io.undertow:undertow-coreTuxCare:Maven |
2.2.33.Final up to 2.2.33.Final-tuxcare.1 | 2.2.33.Final-tuxcare.1 |
io.undertow:undertow-coreTuxCare:Maven From an advisory covering 4 CVEs |
2.3.10.Final up to 2.3.10.Final-tuxcare.1 | 2.3.10.Final-tuxcare.1 |
io.undertow:undertow-coreTuxCare:Maven From an advisory covering 4 CVEs |
2.3.0.Final up to 2.3.0.Final-tuxcare.1 | 2.3.0.Final-tuxcare.1 |
io.undertow:undertow-coreTuxCare:Maven From an advisory covering 6 CVEs |
2.2.24.Final up to 2.2.24.Final-tuxcare.1 | 2.2.24.Final-tuxcare.1 |
undertowDebian:14 |
before 2.3.18-1, plus listed versions 1.3.11-11.3.16-11.3.19-11.3.21-11.3.23-1 Show 45 moreShow less1.3.4-11.3.5-11.3.7-11.4.0-11.4.1-11.4.18-11.4.20-11.4.21-11.4.21-21.4.22-11.4.23-11.4.23-21.4.23-31.4.25-11.4.25-21.4.3-11.4.4-11.4.6-11.4.7-11.4.8-12.0.23-12.0.25-12.0.26-12.0.27-12.0.28-12.0.29-12.0.30-12.1.0-12.1.1-12.1.3-12.2.0-12.2.10-12.2.12-12.2.13-12.2.14-12.2.16-12.2.17-12.2.18-12.2.19-12.2.2-12.2.20-12.2.21-12.2.3-12.2.4-12.2.5-1 |
2.3.18-1 |
io.undertow:undertow-coreMaven |
before 2.2.36.Final, plus listed versions 1.0.0.Alpha11.0.0.Alpha101.0.0.Alpha111.0.0.Alpha121.0.0.Alpha13 Show 45 moreShow less1.0.0.Alpha141.0.0.Alpha151.0.0.Alpha161.0.0.Alpha171.0.0.Alpha181.0.0.Alpha191.0.0.Alpha21.0.0.Alpha201.0.0.Alpha211.0.0.Alpha221.0.0.Alpha31.0.0.Alpha41.0.0.Alpha51.0.0.Alpha61.0.0.Alpha71.0.0.Alpha81.0.0.Alpha91.0.0.Beta11.0.0.Beta101.0.0.Beta111.0.0.Beta121.0.0.Beta131.0.0.Beta141.0.0.Beta151.0.0.Beta161.0.0.Beta171.0.0.Beta181.0.0.Beta191.0.0.Beta21.0.0.Beta201.0.0.Beta211.0.0.Beta221.0.0.Beta231.0.0.Beta241.0.0.Beta251.0.0.Beta261.0.0.Beta271.0.0.Beta281.0.0.Beta291.0.0.Beta31.0.0.Beta301.0.0.Beta311.0.0.Beta321.0.0.Beta331.0.0.Beta4 |
2.2.36.Final |
io.undertow:undertow-coreMaven |
2.3.0.Alpha1 up to 2.3.17.Final, plus listed versions 2.3.0.Alpha22.3.0.Beta12.3.0.Final2.3.1.Final2.3.10.Final Show 14 moreShow less2.3.11.Final2.3.12.Final2.3.13.Final2.3.14.Final2.3.15.Final2.3.16.Final2.3.2.Final2.3.3.Final2.3.4.Final2.3.5.Final2.3.6.Final2.3.7.Final2.3.8.Final2.3.9.Final |
2.3.17.Final |
eap8-amazon-ion-javaRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 2 CVEs |
before 0:1.11.9-2.redhat_00001.1.el8eap | 0:1.11.9-2.redhat_00001.1.el8eap |
Show 119 moreShow less
| Package | Affected | Fixed |
|---|---|---|
eap8-eap-product-conf-parentRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 2 CVEs |
before 0:800.3.1-2.GA_redhat_00002.1.el8eap | 0:800.3.1-2.GA_redhat_00002.1.el8eap |
eap8-eap-product-conf-wildfly-ee-feature-packRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 2 CVEs |
before 0:800.3.1-2.GA_redhat_00002.1.el8eap | 0:800.3.1-2.GA_redhat_00002.1.el8eap |
eap8-undertowRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 2 CVEs |
before 0:2.3.14-2.SP2_redhat_00001.1.el8eap | 0:2.3.14-2.SP2_redhat_00001.1.el8eap |
eap8-wildflyRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 2 CVEs |
before 0:8.0.3-13.GA_redhat_00007.1.el8eap | 0:8.0.3-13.GA_redhat_00007.1.el8eap |
eap8-wildfly-java-jdk11Red Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 2 CVEs |
before 0:8.0.3-13.GA_redhat_00007.1.el8eap | 0:8.0.3-13.GA_redhat_00007.1.el8eap |
eap8-wildfly-java-jdk17Red Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 2 CVEs |
before 0:8.0.3-13.GA_redhat_00007.1.el8eap | 0:8.0.3-13.GA_redhat_00007.1.el8eap |
eap8-wildfly-java-jdk21Red Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 2 CVEs |
before 0:8.0.3-13.GA_redhat_00007.1.el8eap | 0:8.0.3-13.GA_redhat_00007.1.el8eap |
eap8-wildfly-modulesRed Hat:jboss_enterprise_application_platform:8.0::el8 From an advisory covering 2 CVEs |
before 0:8.0.3-13.GA_redhat_00007.1.el8eap | 0:8.0.3-13.GA_redhat_00007.1.el8eap |
eap8-amazon-ion-javaRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 2 CVEs |
before 0:1.11.9-2.redhat_00001.1.el9eap | 0:1.11.9-2.redhat_00001.1.el9eap |
eap8-eap-product-conf-parentRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 2 CVEs |
before 0:800.3.1-2.GA_redhat_00002.1.el9eap | 0:800.3.1-2.GA_redhat_00002.1.el9eap |
eap8-eap-product-conf-wildfly-ee-feature-packRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 2 CVEs |
before 0:800.3.1-2.GA_redhat_00002.1.el9eap | 0:800.3.1-2.GA_redhat_00002.1.el9eap |
eap8-undertowRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 2 CVEs |
before 0:2.3.14-2.SP2_redhat_00001.1.el9eap | 0:2.3.14-2.SP2_redhat_00001.1.el9eap |
eap8-wildflyRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 2 CVEs |
before 0:8.0.3-13.GA_redhat_00007.1.el9eap | 0:8.0.3-13.GA_redhat_00007.1.el9eap |
eap8-wildfly-java-jdk11Red Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 2 CVEs |
before 0:8.0.3-13.GA_redhat_00007.1.el9eap | 0:8.0.3-13.GA_redhat_00007.1.el9eap |
eap8-wildfly-java-jdk17Red Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 2 CVEs |
before 0:8.0.3-13.GA_redhat_00007.1.el9eap | 0:8.0.3-13.GA_redhat_00007.1.el9eap |
eap8-wildfly-java-jdk21Red Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 2 CVEs |
before 0:8.0.3-13.GA_redhat_00007.1.el9eap | 0:8.0.3-13.GA_redhat_00007.1.el9eap |
eap8-wildfly-modulesRed Hat:jboss_enterprise_application_platform:8.0::el9 From an advisory covering 2 CVEs |
before 0:8.0.3-13.GA_redhat_00007.1.el9eap | 0:8.0.3-13.GA_redhat_00007.1.el9eap |
eap7-undertowRed Hat:jboss_enterprise_application_platform:7.4::el7 |
before 0:2.2.33-2.SP2_redhat_00001.1.el7eap | 0:2.2.33-2.SP2_redhat_00001.1.el7eap |
eap7-wildflyRed Hat:jboss_enterprise_application_platform:7.4::el7 |
before 0:7.4.18-1.GA_redhat_00003.1.el7eap | 0:7.4.18-1.GA_redhat_00003.1.el7eap |
eap7-wildfly-java-jdk11Red Hat:jboss_enterprise_application_platform:7.4::el7 |
before 0:7.4.18-1.GA_redhat_00003.1.el7eap | 0:7.4.18-1.GA_redhat_00003.1.el7eap |
eap7-wildfly-java-jdk8Red Hat:jboss_enterprise_application_platform:7.4::el7 |
before 0:7.4.18-1.GA_redhat_00003.1.el7eap | 0:7.4.18-1.GA_redhat_00003.1.el7eap |
eap7-wildfly-javadocsRed Hat:jboss_enterprise_application_platform:7.4::el7 |
before 0:7.4.18-1.GA_redhat_00003.1.el7eap | 0:7.4.18-1.GA_redhat_00003.1.el7eap |
eap7-wildfly-modulesRed Hat:jboss_enterprise_application_platform:7.4::el7 |
before 0:7.4.18-1.GA_redhat_00003.1.el7eap | 0:7.4.18-1.GA_redhat_00003.1.el7eap |
eap7-undertowRed Hat:jboss_enterprise_application_platform:7.4::el8 |
before 0:2.2.33-2.SP2_redhat_00001.1.el8eap | 0:2.2.33-2.SP2_redhat_00001.1.el8eap |
eap7-wildflyRed Hat:jboss_enterprise_application_platform:7.4::el8 |
before 0:7.4.18-1.GA_redhat_00003.1.el8eap | 0:7.4.18-1.GA_redhat_00003.1.el8eap |
eap7-wildfly-java-jdk11Red Hat:jboss_enterprise_application_platform:7.4::el8 |
before 0:7.4.18-1.GA_redhat_00003.1.el8eap | 0:7.4.18-1.GA_redhat_00003.1.el8eap |
eap7-wildfly-java-jdk17Red Hat:jboss_enterprise_application_platform:7.4::el8 |
before 0:7.4.18-1.GA_redhat_00003.1.el8eap | 0:7.4.18-1.GA_redhat_00003.1.el8eap |
eap7-wildfly-java-jdk8Red Hat:jboss_enterprise_application_platform:7.4::el8 |
before 0:7.4.18-1.GA_redhat_00003.1.el8eap | 0:7.4.18-1.GA_redhat_00003.1.el8eap |
eap7-wildfly-javadocsRed Hat:jboss_enterprise_application_platform:7.4::el8 |
before 0:7.4.18-1.GA_redhat_00003.1.el8eap | 0:7.4.18-1.GA_redhat_00003.1.el8eap |
eap7-wildfly-modulesRed Hat:jboss_enterprise_application_platform:7.4::el8 |
before 0:7.4.18-1.GA_redhat_00003.1.el8eap | 0:7.4.18-1.GA_redhat_00003.1.el8eap |
eap7-undertowRed Hat:jboss_enterprise_application_platform:7.4::el9 |
before 0:2.2.33-2.SP2_redhat_00001.1.el9eap | 0:2.2.33-2.SP2_redhat_00001.1.el9eap |
eap7-wildflyRed Hat:jboss_enterprise_application_platform:7.4::el9 |
before 0:7.4.18-1.GA_redhat_00003.1.el9eap | 0:7.4.18-1.GA_redhat_00003.1.el9eap |
eap7-wildfly-java-jdk11Red Hat:jboss_enterprise_application_platform:7.4::el9 |
before 0:7.4.18-1.GA_redhat_00003.1.el9eap | 0:7.4.18-1.GA_redhat_00003.1.el9eap |
eap7-wildfly-java-jdk17Red Hat:jboss_enterprise_application_platform:7.4::el9 |
before 0:7.4.18-1.GA_redhat_00003.1.el9eap | 0:7.4.18-1.GA_redhat_00003.1.el9eap |
eap7-wildfly-java-jdk8Red Hat:jboss_enterprise_application_platform:7.4::el9 |
before 0:7.4.18-1.GA_redhat_00003.1.el9eap | 0:7.4.18-1.GA_redhat_00003.1.el9eap |
eap7-wildfly-javadocsRed Hat:jboss_enterprise_application_platform:7.4::el9 |
before 0:7.4.18-1.GA_redhat_00003.1.el9eap | 0:7.4.18-1.GA_redhat_00003.1.el9eap |
eap7-wildfly-modulesRed Hat:jboss_enterprise_application_platform:7.4::el9 |
before 0:7.4.18-1.GA_redhat_00003.1.el9eap | 0:7.4.18-1.GA_redhat_00003.1.el9eap |
eap7-apache-commons-beanutilsRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 5 CVEs |
before 0:1.11.0-1.redhat_00001.1.el7eap | 0:1.11.0-1.redhat_00001.1.el7eap |
eap7-hornetqRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 5 CVEs |
before 0:2.4.11-1.Final_redhat_00001.1.el7eap | 0:2.4.11-1.Final_redhat_00001.1.el7eap |
eap7-hornetq-commonsRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 5 CVEs |
before 0:2.4.11-1.Final_redhat_00001.1.el7eap | 0:2.4.11-1.Final_redhat_00001.1.el7eap |
eap7-hornetq-core-clientRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 5 CVEs |
before 0:2.4.11-1.Final_redhat_00001.1.el7eap | 0:2.4.11-1.Final_redhat_00001.1.el7eap |
eap7-hornetq-jms-clientRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 5 CVEs |
before 0:2.4.11-1.Final_redhat_00001.1.el7eap | 0:2.4.11-1.Final_redhat_00001.1.el7eap |
eap7-jboss-server-migrationRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 5 CVEs |
before 0:1.7.2-19.Final_redhat_00020.1.el7eap | 0:1.7.2-19.Final_redhat_00020.1.el7eap |
eap7-jboss-server-migration-cliRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 5 CVEs |
before 0:1.7.2-19.Final_redhat_00020.1.el7eap | 0:1.7.2-19.Final_redhat_00020.1.el7eap |
eap7-jboss-server-migration-coreRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 5 CVEs |
before 0:1.7.2-19.Final_redhat_00020.1.el7eap | 0:1.7.2-19.Final_redhat_00020.1.el7eap |
eap7-jboss-server-migration-eap6.4Red Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 5 CVEs |
before 0:1.7.2-19.Final_redhat_00020.1.el7eap | 0:1.7.2-19.Final_redhat_00020.1.el7eap |
eap7-jboss-server-migration-eap6.4-to-eap7.3Red Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 5 CVEs |
before 0:1.7.2-19.Final_redhat_00020.1.el7eap | 0:1.7.2-19.Final_redhat_00020.1.el7eap |
eap7-jboss-server-migration-eap7.0Red Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 5 CVEs |
before 0:1.7.2-19.Final_redhat_00020.1.el7eap | 0:1.7.2-19.Final_redhat_00020.1.el7eap |
eap7-jboss-server-migration-eap7.1Red Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 5 CVEs |
before 0:1.7.2-19.Final_redhat_00020.1.el7eap | 0:1.7.2-19.Final_redhat_00020.1.el7eap |
eap7-jboss-server-migration-eap7.2Red Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 5 CVEs |
before 0:1.7.2-19.Final_redhat_00020.1.el7eap | 0:1.7.2-19.Final_redhat_00020.1.el7eap |
eap7-jboss-server-migration-eap7.2-to-eap7.3Red Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 5 CVEs |
before 0:1.7.2-19.Final_redhat_00020.1.el7eap | 0:1.7.2-19.Final_redhat_00020.1.el7eap |
eap7-jboss-server-migration-eap7.3-serverRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 5 CVEs |
before 0:1.7.2-19.Final_redhat_00020.1.el7eap | 0:1.7.2-19.Final_redhat_00020.1.el7eap |
eap7-jboss-server-migration-wildfly10.0Red Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 5 CVEs |
before 0:1.7.2-19.Final_redhat_00020.1.el7eap | 0:1.7.2-19.Final_redhat_00020.1.el7eap |
eap7-jboss-server-migration-wildfly10.1Red Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 5 CVEs |
before 0:1.7.2-19.Final_redhat_00020.1.el7eap | 0:1.7.2-19.Final_redhat_00020.1.el7eap |
eap7-jboss-server-migration-wildfly11.0Red Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 5 CVEs |
before 0:1.7.2-19.Final_redhat_00020.1.el7eap | 0:1.7.2-19.Final_redhat_00020.1.el7eap |
eap7-jboss-server-migration-wildfly12.0Red Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 5 CVEs |
before 0:1.7.2-19.Final_redhat_00020.1.el7eap | 0:1.7.2-19.Final_redhat_00020.1.el7eap |
eap7-jboss-server-migration-wildfly13.0-serverRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 5 CVEs |
before 0:1.7.2-19.Final_redhat_00020.1.el7eap | 0:1.7.2-19.Final_redhat_00020.1.el7eap |
eap7-jboss-server-migration-wildfly14.0-serverRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 5 CVEs |
before 0:1.7.2-19.Final_redhat_00020.1.el7eap | 0:1.7.2-19.Final_redhat_00020.1.el7eap |
eap7-jboss-server-migration-wildfly15.0-serverRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 5 CVEs |
before 0:1.7.2-19.Final_redhat_00020.1.el7eap | 0:1.7.2-19.Final_redhat_00020.1.el7eap |
eap7-jboss-server-migration-wildfly16.0-serverRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 5 CVEs |
before 0:1.7.2-19.Final_redhat_00020.1.el7eap | 0:1.7.2-19.Final_redhat_00020.1.el7eap |
eap7-jboss-server-migration-wildfly17.0-serverRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 5 CVEs |
before 0:1.7.2-19.Final_redhat_00020.1.el7eap | 0:1.7.2-19.Final_redhat_00020.1.el7eap |
eap7-jboss-server-migration-wildfly18.0-serverRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 5 CVEs |
before 0:1.7.2-19.Final_redhat_00020.1.el7eap | 0:1.7.2-19.Final_redhat_00020.1.el7eap |
eap7-jboss-server-migration-wildfly8.2Red Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 5 CVEs |
before 0:1.7.2-19.Final_redhat_00020.1.el7eap | 0:1.7.2-19.Final_redhat_00020.1.el7eap |
eap7-jboss-server-migration-wildfly9.0Red Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 5 CVEs |
before 0:1.7.2-19.Final_redhat_00020.1.el7eap | 0:1.7.2-19.Final_redhat_00020.1.el7eap |
eap7-undertowRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 5 CVEs |
before 0:2.0.41-5.SP6_redhat_00001.1.el7eap | 0:2.0.41-5.SP6_redhat_00001.1.el7eap |
eap7-wildflyRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 5 CVEs |
before 0:7.3.15-5.GA_redhat_00003.1.el7eap | 0:7.3.15-5.GA_redhat_00003.1.el7eap |
eap7-wildfly-java-jdk11Red Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 5 CVEs |
before 0:7.3.15-5.GA_redhat_00003.1.el7eap | 0:7.3.15-5.GA_redhat_00003.1.el7eap |
eap7-wildfly-java-jdk8Red Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 5 CVEs |
before 0:7.3.15-5.GA_redhat_00003.1.el7eap | 0:7.3.15-5.GA_redhat_00003.1.el7eap |
eap7-wildfly-javadocsRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 5 CVEs |
before 0:7.3.15-5.GA_redhat_00003.1.el7eap | 0:7.3.15-5.GA_redhat_00003.1.el7eap |
eap7-wildfly-modulesRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 5 CVEs |
before 0:7.3.15-5.GA_redhat_00003.1.el7eap | 0:7.3.15-5.GA_redhat_00003.1.el7eap |
eap7-jackson-annotationsRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 3 CVEs |
before 0:2.10.4-4.redhat_00008.1.el7eap | 0:2.10.4-4.redhat_00008.1.el7eap |
eap7-jackson-coreRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 3 CVEs |
before 0:2.10.4-4.redhat_00008.1.el7eap | 0:2.10.4-4.redhat_00008.1.el7eap |
eap7-jackson-databindRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 3 CVEs |
before 0:2.10.4-6.redhat_00008.1.el7eap | 0:2.10.4-6.redhat_00008.1.el7eap |
eap7-jackson-datatype-jdk8Red Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 3 CVEs |
before 0:2.10.4-3.redhat_00008.1.el7eap | 0:2.10.4-3.redhat_00008.1.el7eap |
eap7-jackson-datatype-jsr310Red Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 3 CVEs |
before 0:2.10.4-3.redhat_00008.1.el7eap | 0:2.10.4-3.redhat_00008.1.el7eap |
eap7-jackson-jaxrs-baseRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 3 CVEs |
before 0:2.10.4-4.redhat_00008.1.el7eap | 0:2.10.4-4.redhat_00008.1.el7eap |
eap7-jackson-jaxrs-json-providerRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 3 CVEs |
before 0:2.10.4-4.redhat_00008.1.el7eap | 0:2.10.4-4.redhat_00008.1.el7eap |
eap7-jackson-jaxrs-providersRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 3 CVEs |
before 0:2.10.4-4.redhat_00008.1.el7eap | 0:2.10.4-4.redhat_00008.1.el7eap |
eap7-jackson-module-jaxb-annotationsRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 3 CVEs |
before 0:2.10.4-6.redhat_00008.1.el7eap | 0:2.10.4-6.redhat_00008.1.el7eap |
eap7-jackson-modules-baseRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 3 CVEs |
before 0:2.10.4-6.redhat_00008.1.el7eap | 0:2.10.4-6.redhat_00008.1.el7eap |
eap7-jackson-modules-java8Red Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 3 CVEs |
before 0:2.10.4-3.redhat_00008.1.el7eap | 0:2.10.4-3.redhat_00008.1.el7eap |
eap7-jboss-server-migrationRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 3 CVEs |
before 0:1.7.2-20.Final_redhat_00021.1.el7eap | 0:1.7.2-20.Final_redhat_00021.1.el7eap |
eap7-jboss-server-migration-cliRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 3 CVEs |
before 0:1.7.2-20.Final_redhat_00021.1.el7eap | 0:1.7.2-20.Final_redhat_00021.1.el7eap |
eap7-jboss-server-migration-coreRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 3 CVEs |
before 0:1.7.2-20.Final_redhat_00021.1.el7eap | 0:1.7.2-20.Final_redhat_00021.1.el7eap |
eap7-jboss-server-migration-eap6.4Red Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 3 CVEs |
before 0:1.7.2-20.Final_redhat_00021.1.el7eap | 0:1.7.2-20.Final_redhat_00021.1.el7eap |
eap7-jboss-server-migration-eap6.4-to-eap7.3Red Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 3 CVEs |
before 0:1.7.2-20.Final_redhat_00021.1.el7eap | 0:1.7.2-20.Final_redhat_00021.1.el7eap |
eap7-jboss-server-migration-eap7.0Red Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 3 CVEs |
before 0:1.7.2-20.Final_redhat_00021.1.el7eap | 0:1.7.2-20.Final_redhat_00021.1.el7eap |
eap7-jboss-server-migration-eap7.1Red Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 3 CVEs |
before 0:1.7.2-20.Final_redhat_00021.1.el7eap | 0:1.7.2-20.Final_redhat_00021.1.el7eap |
eap7-jboss-server-migration-eap7.2Red Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 3 CVEs |
before 0:1.7.2-20.Final_redhat_00021.1.el7eap | 0:1.7.2-20.Final_redhat_00021.1.el7eap |
eap7-jboss-server-migration-eap7.2-to-eap7.3Red Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 3 CVEs |
before 0:1.7.2-20.Final_redhat_00021.1.el7eap | 0:1.7.2-20.Final_redhat_00021.1.el7eap |
eap7-jboss-server-migration-eap7.3-serverRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 3 CVEs |
before 0:1.7.2-20.Final_redhat_00021.1.el7eap | 0:1.7.2-20.Final_redhat_00021.1.el7eap |
eap7-jboss-server-migration-wildfly10.0Red Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 3 CVEs |
before 0:1.7.2-20.Final_redhat_00021.1.el7eap | 0:1.7.2-20.Final_redhat_00021.1.el7eap |
eap7-jboss-server-migration-wildfly10.1Red Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 3 CVEs |
before 0:1.7.2-20.Final_redhat_00021.1.el7eap | 0:1.7.2-20.Final_redhat_00021.1.el7eap |
eap7-jboss-server-migration-wildfly11.0Red Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 3 CVEs |
before 0:1.7.2-20.Final_redhat_00021.1.el7eap | 0:1.7.2-20.Final_redhat_00021.1.el7eap |
eap7-jboss-server-migration-wildfly12.0Red Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 3 CVEs |
before 0:1.7.2-20.Final_redhat_00021.1.el7eap | 0:1.7.2-20.Final_redhat_00021.1.el7eap |
eap7-jboss-server-migration-wildfly13.0-serverRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 3 CVEs |
before 0:1.7.2-20.Final_redhat_00021.1.el7eap | 0:1.7.2-20.Final_redhat_00021.1.el7eap |
eap7-jboss-server-migration-wildfly14.0-serverRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 3 CVEs |
before 0:1.7.2-20.Final_redhat_00021.1.el7eap | 0:1.7.2-20.Final_redhat_00021.1.el7eap |
eap7-jboss-server-migration-wildfly15.0-serverRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 3 CVEs |
before 0:1.7.2-20.Final_redhat_00021.1.el7eap | 0:1.7.2-20.Final_redhat_00021.1.el7eap |
eap7-jboss-server-migration-wildfly16.0-serverRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 3 CVEs |
before 0:1.7.2-20.Final_redhat_00021.1.el7eap | 0:1.7.2-20.Final_redhat_00021.1.el7eap |
eap7-jboss-server-migration-wildfly17.0-serverRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 3 CVEs |
before 0:1.7.2-20.Final_redhat_00021.1.el7eap | 0:1.7.2-20.Final_redhat_00021.1.el7eap |
eap7-jboss-server-migration-wildfly18.0-serverRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 3 CVEs |
before 0:1.7.2-20.Final_redhat_00021.1.el7eap | 0:1.7.2-20.Final_redhat_00021.1.el7eap |
eap7-jboss-server-migration-wildfly8.2Red Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 3 CVEs |
before 0:1.7.2-20.Final_redhat_00021.1.el7eap | 0:1.7.2-20.Final_redhat_00021.1.el7eap |
eap7-jboss-server-migration-wildfly9.0Red Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 3 CVEs |
before 0:1.7.2-20.Final_redhat_00021.1.el7eap | 0:1.7.2-20.Final_redhat_00021.1.el7eap |
eap7-nettyRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 3 CVEs |
before 0:4.1.63-6.Final_redhat_00004.1.el7eap | 0:4.1.63-6.Final_redhat_00004.1.el7eap |
eap7-netty-allRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 3 CVEs |
before 0:4.1.63-6.Final_redhat_00004.1.el7eap | 0:4.1.63-6.Final_redhat_00004.1.el7eap |
eap7-undertowRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 3 CVEs |
before 0:2.0.41-6.SP7_redhat_00001.1.el7eap | 0:2.0.41-6.SP7_redhat_00001.1.el7eap |
eap7-wildflyRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 3 CVEs |
before 0:7.3.16-3.GA_redhat_00003.1.el7eap | 0:7.3.16-3.GA_redhat_00003.1.el7eap |
eap7-wildfly-java-jdk11Red Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 3 CVEs |
before 0:7.3.16-3.GA_redhat_00003.1.el7eap | 0:7.3.16-3.GA_redhat_00003.1.el7eap |
eap7-wildfly-java-jdk8Red Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 3 CVEs |
before 0:7.3.16-3.GA_redhat_00003.1.el7eap | 0:7.3.16-3.GA_redhat_00003.1.el7eap |
eap7-wildfly-javadocsRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 3 CVEs |
before 0:7.3.16-3.GA_redhat_00003.1.el7eap | 0:7.3.16-3.GA_redhat_00003.1.el7eap |
eap7-wildfly-modulesRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 3 CVEs |
before 0:7.3.16-3.GA_redhat_00003.1.el7eap | 0:7.3.16-3.GA_redhat_00003.1.el7eap |
undertowUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 1.3.4-11.3.5-11.3.7-11.3.11-11.3.16-11.3.16-1ubuntu0.1~esm1 |
None known |
undertowUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 1.4.20-11.4.21-11.4.22-11.4.23-11.4.23-2build11.4.23-31.4.23-3ubuntu0.1~esm1 |
None known |
undertowUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 2.0.23-12.0.27-12.0.28-12.0.29-12.0.29-1ubuntu0.1~esm1 |
None known |
undertowUbuntu:Pro:22.04:LTS |
All versions, plus listed versions 2.2.8-12.2.12-12.2.13-12.2.14-12.2.16-12.2.16-1ubuntu0.1~esm1 |
None known |
undertowUbuntu:Pro:24.04:LTS |
All versions, plus listed versions 2.3.8-22.3.8-2ubuntu0.1~esm1 |
None known |
undertowUbuntu:25.10 |
All versions, plus listed versions 2.3.18-12.3.18-2 |
None known |
undertowUbuntu:26.10 |
All versions, plus listed versions 2.3.20-1ubuntu1 |
None known |
undertowUbuntu:26.04:LTS |
All versions, plus listed versions 2.3.18-22.3.20-12.3.20-1ubuntu1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | EUVD, NVD, OSV | |
| products | CVE List | |
| facts | CVE List, EUVD, OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-7885 is a high vulnerability (CVSS 7.5) in Red Hat Hawtio 4.0.0 For Red Hat Build Of Apache Camel 4, published August 21, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.64%, the 85th percentile. Fixed in io.undertow:undertow-core 2.2.36.Final.
References
access.redhat.com/errata/RHSA-2024:11023
Show 82 moreShow less
bugzilla.redhat.com/show_bug.cgi?id=2305290
security.netapp.com/advisory/ntap-20241011-0004
nvd.nist.gov/vuln/detail/CVE-2024-7885
github.com/undertow-io/undertow/blob/182e4ca1543c52f438b0244c930dca3d8b6e68e3/core/src/main/java/io/undertow/server/protocol/proxy/ProxyProtocolReadListener.java
security-tracker.debian.org/tracker/CVE-2024-7885
issues.redhat.com/browse/JBEAP-27711
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_7441.json
cve.org/CVERecord?id=CVE-2024-7885
docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4
httpd.apache.org/security/vulnerabilities_24.html
nowotarski.info/http2-continuation-flood
kb.cert.org/vuls/id/421644
hornetq.com
lists.apache.org/thread/s0hb3jkfj5f3ryx6c57zqtfohb0of1g9
openwall.com/lists/oss-security/2025/05/28/6
kb.cert.org/vuls/id/767506
ubuntu.com/security/CVE-2024-7885
This page doesn't list everything
Left out here: 257 versions. The JSON record has them.