{"id":"CVE-2022-2764","aliases":["DEBIAN-CVE-2022-2764","EUVD-2022-35006","GHSA-xpxq-cp94-87j2","RHSA-2022:8790","RHSA-2022:8791","RHSA-2022:8792","RHSA-2023:1043","RHSA-2023:1044","RHSA-2023:1045","UBUNTU-CVE-2022-2764"],"status":"published","title":"A flaw was found in Undertow. Denial of service can be achieved as Undertow server waits for the...","description":"A flaw was found in Undertow. Denial of service can be achieved as Undertow server waits for the LAST_CHUNK forever for EJB invocations.","severity":{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00897,"percentile":0.59842,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-400"],"published":"2022-09-01T00:00:00Z","modified":"2026-11-03T08:01:11Z","fixes":[{"ecosystem":"Debian:14","package":"undertow","fixed_in":["2.2.21-1"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-undertow","fixed_in":["0:2.2.20-1.SP1_redhat_00001.1.el7eap"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-undertow","fixed_in":["0:2.2.20-1.SP1_redhat_00001.1.el8eap"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-undertow","fixed_in":["0:2.2.20-1.SP1_redhat_00001.1.el9eap"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:14","package":"undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.21-1"}]}],"versions":["1.3.11-1","1.3.16-1","1.3.19-1","1.3.21-1","1.3.23-1","1.3.4-1","1.3.5-1","1.3.7-1","1.4.0-1","1.4.1-1","1.4.18-1","1.4.20-1","1.4.21-1","1.4.21-2","1.4.22-1","1.4.23-1","1.4.23-2","1.4.23-3","1.4.25-1","1.4.25-2","1.4.3-1","1.4.4-1","1.4.6-1","1.4.7-1","1.4.8-1","2.0.23-1","2.0.25-1","2.0.26-1","2.0.27-1","2.0.28-1","2.0.29-1","2.0.30-1","2.1.0-1","2.1.1-1","2.1.3-1","2.2.0-1","2.2.10-1","2.2.12-1","2.2.13-1","2.2.14-1","2.2.16-1","2.2.17-1","2.2.18-1","2.2.19-1","2.2.2-1","2.2.20-1","2.2.3-1","2.2.4-1","2.2.5-1","2.2.8-1"]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.20-1.SP1_redhat_00001.1.el7eap"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.20-1.SP1_redhat_00001.1.el8eap"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.20-1.SP1_redhat_00001.1.el9eap"}]}]},{"source":"osv","ecosystem":"Red Hat:red_hat_single_sign_on:7.6::el7","package":"rh-sso7-keycloak","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.0.6-1.redhat_00001.1.el7sso"}]}],"bundled":31},{"source":"osv","ecosystem":"Red Hat:red_hat_single_sign_on:7.6::el7","package":"rh-sso7-keycloak-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.0.6-1.redhat_00001.1.el7sso"}]}],"bundled":31},{"source":"osv","ecosystem":"Red Hat:red_hat_single_sign_on:7.6::el8","package":"rh-sso7-keycloak","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.0.6-1.redhat_00001.1.el8sso"}]}],"bundled":31},{"source":"osv","ecosystem":"Red Hat:red_hat_single_sign_on:7.6::el8","package":"rh-sso7-keycloak-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.0.6-1.redhat_00001.1.el8sso"}]}],"bundled":31},{"source":"osv","ecosystem":"Red Hat:red_hat_single_sign_on:7.6::el9","package":"rh-sso7-keycloak","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.0.6-1.redhat_00001.1.el9sso"}]}],"bundled":31},{"source":"osv","ecosystem":"Red Hat:red_hat_single_sign_on:7.6::el9","package":"rh-sso7-keycloak-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.0.6-1.redhat_00001.1.el9sso"}]}],"bundled":31},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.3.4-1","1.3.5-1","1.3.7-1","1.3.11-1","1.3.16-1","1.3.16-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.4.20-1","1.4.21-1","1.4.22-1","1.4.23-1","1.4.23-2build1","1.4.23-3","1.4.23-3ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.0.23-1","2.0.27-1","2.0.28-1","2.0.29-1","2.0.29-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.2.8-1","2.2.12-1","2.2.13-1","2.2.14-1","2.2.16-1","2.2.16-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.8-2","2.3.8-2ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.18-1","2.3.18-2"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.20-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"undertow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.18-2","2.3.20-1","2.3.20-1ubuntu1"]}],"products":[{"vendor":"netapp","product":"active_iq_unified_manager"},{"vendor":"netapp","product":"cloud_secure_agent"},{"vendor":"netapp","product":"oncommand_insight"},{"vendor":"netapp","product":"oncommand_workflow_automation"},{"vendor":"red hat","product":"undertow"},{"vendor":"redhat","product":"integration_camel_k"},{"vendor":"redhat","product":"jboss_enterprise_application_platform"},{"vendor":"redhat","product":"jboss_fuse"},{"vendor":"redhat","product":"single_sign-on"},{"vendor":"redhat","product":"undertow"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2117506","tags":["x_transferred","Issue Tracking","Vendor Advisory","report"]},{"url":"https://security.netapp.com/advisory/ntap-20221014-0006/","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2764","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-xpxq-cp94-87j2"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/2xxx/CVE-2022-2764.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-2764","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:8790","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.4/","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.4/html-single/installation_guide/","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-23833","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-23913","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-23997","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-23998","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-24011","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-24013","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-24028","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-24030","tags":["article"]},{"url":"https://issues.redhat.com/browse/JBEAP-24031","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8790.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-2764","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-2764","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2022:8791","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/JBEAP-23834","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8791.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:8792","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/JBEAP-23835","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_8792.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:1043","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1601614","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1601617","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1701972","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1828406","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2031904","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2066009","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2072009","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2073157","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2105075","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2126789","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2129706","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2129707","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2129709","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2135244","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2135247","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2135770","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2135771","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2138971","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2140597","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2141404","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2145194","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2148496","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2150009","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2155681","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2155682","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2155970","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2156263","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2156324","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2158585","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2160585","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_1043.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14040","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14040","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14040","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14042","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14042","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14042","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11358","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11358","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11358","tags":["advisory"]},{"url":"https://blog.jquery.com/2019/04/10/jquery-3-4-0-released/","tags":["article"]},{"url":"https://www.drupal.org/sa-core-2019-006","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-11022","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-11022","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-11022","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-gxr4-xjj5-5px2","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-11023","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1850004","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-11023","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-11023","tags":["advisory"]},{"url":"https://blog.jquery.com/2020/04/10/jquery-3-5-0-released/","tags":["article"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-35065","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-35065","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-35065","tags":["advisory"]},{"url":"https://security.snyk.io/vuln/SNYK-JS-GLOBPARENT-1314294","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-44906","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-44906","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-44906","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-xvch-5gv4-984h","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-1274","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-1274","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1274","tags":["advisory"]},{"url":"https://github.com/keycloak/keycloak/security/advisories/GHSA-m4fv-gm5m-4725","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-1438","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-1438","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1438","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-1471","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-1471","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1471","tags":["advisory"]},{"url":"https://github.com/google/security-research/security/advisories/GHSA-mjmj-j48q-9wg2","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-3916","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-3916","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3916","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-4137","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-4137","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4137","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-24785","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-24785","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-24785","tags":["advisory"]},{"url":"https://github.com/moment/moment/security/advisories/GHSA-8hfj-j24r-96c4","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-25857","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-25857","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25857","tags":["advisory"]},{"url":"https://bitbucket.org/snakeyaml/snakeyaml/issues/525","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-31129","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-31129","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-31129","tags":["advisory"]},{"url":"https://github.com/moment/moment/security/advisories/GHSA-wc69-rhjr-hc9g","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-37603","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-37603","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-37603","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-38749","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-38749","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-38749","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-38750","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-38750","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-38750","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-38751","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-38751","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-38751","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-40149","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-40149","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-40149","tags":["advisory"]},{"url":"https://github.com/jettison-json/jettison/releases/tag/jettison-1.5.1","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-40150","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-40150","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-40150","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-42003","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-42003","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-42003","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-42004","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-42004","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-42004","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-45047","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-45047","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-45047","tags":["advisory"]},{"url":"https://www.mail-archive.com/dev@mina.apache.org/msg39312.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-45693","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-45693","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-45693","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-46175","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-46175","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-46175","tags":["advisory"]},{"url":"https://github.com/json5/json5/security/advisories/GHSA-9c47-m6qq-7p4h","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-46363","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-46363","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-46363","tags":["advisory"]},{"url":"https://lists.apache.org/thread/pdzo1qgyplf4y523tnnzrcm7hoco3l8c","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-46364","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-46364","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-46364","tags":["advisory"]},{"url":"https://cxf.apache.org/security-advisories.data/CVE-2022-46364.txt?version=1\u0026modificationDate=1670944472739\u0026api=v2","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-0091","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-0091","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-0091","tags":["advisory"]},{"url":"https://github.com/keycloak/keycloak/security/advisories/GHSA-v436-q368-hvgg","tags":["article"]},{"url":"https://github.com/keycloak/security/issues/27","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-0264","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-0264","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-0264","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:1044","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_1044.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:1045","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_1045.json","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-2764","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2022-2764","description":"A flaw was found in Undertow. Denial of service can be achieved as Undertow server waits for the LAST_CHUNK forever for EJB invocations.","status":"published","published":"2022-09-01T00:00:00Z","modified":"2024-08-03T00:46:04.429Z","cwes":["CWE-400"],"updated_at":"2026-11-02T14:34:32.495407Z"}],"euvd":[{"id":"EUVD-2022-35006","description":"A flaw was found in Undertow. Denial of service can be achieved as Undertow server waits for the LAST_CHUNK forever for EJB invocations.","status":"published","published":"2022-09-01T00:00:00Z","modified":"2024-08-03T00:46:04Z","updated_at":"2026-11-03T03:25:57.460299Z"}],"ghsa":[{"id":"GHSA-xpxq-cp94-87j2","title":"A flaw was found in Undertow. Denial of service can be achieved as Undertow server waits for the...","description":"A flaw was found in Undertow. Denial of service can be achieved as Undertow server waits for the LAST_CHUNK forever for EJB invocations.","status":"published","published":"2022-09-02T00:01:01Z","modified":"2023-01-28T05:05:32Z","cvss":[{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T14:44:21.48183Z"}],"nvd":[{"id":"CVE-2022-2764","description":"A flaw was found in Undertow. Denial of service can be achieved as Undertow server waits for the LAST_CHUNK forever for EJB invocations.","status":"published","published":"2022-09-01T21:15:09.807Z","modified":"2026-06-17T04:42:32.31Z","cvss":[{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:07:26.802986Z"}],"osv":[{"id":"DEBIAN-CVE-2022-2764","description":"A flaw was found in Undertow. Denial of service can be achieved as Undertow server waits for the LAST_CHUNK forever for EJB invocations.","status":"published","published":"2022-09-01T21:15:09.807Z","modified":"2026-11-03T08:01:11.641913298Z","cvss":[{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-03T08:25:01.007408Z"},{"id":"RHSA-2022:8790","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.8 Security update","status":"published","published":"2024-09-13T23:22:38Z","modified":"2026-06-29T10:44:43Z","cvss":[{"version":"3.1","score":4.2,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RHSA-2022:8791","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.8 Security update","status":"published","published":"2024-09-13T23:22:29Z","modified":"2026-06-29T10:44:43Z","cvss":[{"version":"3.1","score":4.2,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RHSA-2022:8792","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.8 Security update","status":"published","published":"2024-09-13T23:22:46Z","modified":"2026-06-29T10:44:44Z","cvss":[{"version":"3.1","score":4.2,"vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RHSA-2023:1043","title":"Red Hat Security Advisory: Red Hat Single Sign-On 7.6.2 security update on RHEL 7","status":"published","published":"2024-09-30T16:32:34Z","modified":"2026-10-13T10:03:51Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:1044","title":"Red Hat Security Advisory: Red Hat Single Sign-On 7.6.2 security update on RHEL 8","status":"published","published":"2024-09-30T16:32:14Z","modified":"2026-10-13T10:03:52Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:1045","title":"Red Hat Security Advisory: Red Hat Single Sign-On 7.6.2 security update on RHEL 9","status":"published","published":"2024-09-30T16:31:49Z","modified":"2026-10-13T10:03:53Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"UBUNTU-CVE-2022-2764","description":"A flaw was found in Undertow. Denial of service can be achieved as Undertow server waits for the LAST_CHUNK forever for EJB invocations.","status":"published","published":"2022-09-01T21:15:00Z","modified":"2026-10-17T12:55:58.119868136Z","cvss":[{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T16:53:53.899276Z"},{"id":"CVE-2022-2764","description":"A flaw was found in Undertow. Denial of service can be achieved as Undertow server waits for the LAST_CHUNK forever for EJB invocations.","status":"published","published":"2022-09-01T00:00:00Z","modified":"2026-10-28T02:30:32.838476221Z","cwes":["CWE-400"],"updated_at":"2026-11-02T15:44:24.758293Z"}]}}