undertow vulnerabilities (Debian)
58 vulnerabilities.
-
undertowDebian Undertow: undertow: chunkreader message length permits chunk-size overflow 6.5 Medium -
undertowDebian Undertow: undertow: pathresourcemanager safepaths check allows sibling-directory symlink traversal 3.7 Low -
undertowDebian Undertow-core: undertow: websocketcontainer defaults for buffers and timeouts are infinite 7.5 High -
undertowDebian Undertow-core: undertow: denial of service via websocket permessage-deflate processing 7.5 High -
undertowDebian Io.undertow/undertow: undertow: http response header integrity issue due to character truncation 5.3 Medium -
undertowDebian Undertow-core: undertow:http request smuggling via oversized chunk-size bit overlap 5.3 Medium -
undertowDebian Undertow: undertow-websockets: undertow: pre-auth dos on websocket endpoint with @serverendpoint class with any @onmessage method 7.5 High -
undertowDebian Undertow-core: oom via missing limits in chunked trailer in eap's undertow 7.5 High -
undertowDebian Undertow-core: undertow: authentication bypass via ajp ssl_cert/is_ssl forgery 7.4 High -
undertowDebian Undertow: undertow: request smuggling via malformed http request headers 8.7 High -
undertowDebian Undertow: undertow: request smuggling via `\r\r\r` as a header block terminator 8.7 High -
undertowDebian Undertow: undertow: request smuggling via inconsistent header parsing 8.7 High -
undertowDebian Undertow: outofmemoryerror in httpservletrequestimpl.getparameternames() can cause remote dos attacks 7.5 High -
undertowDebian Undertow-core: undertow http server fails to reject malformed host headers leading to potential cache poisoning and ssrf 9.6 Critical -
undertowDebian Undertow: outofmemory when parsing form data encoding with application/x-www-form-urlencoded 7.5 High -
undertowDebian Undertow: undertow madeyoureset http/2 ddos vulnerability 7.5 High -
undertowDebian Undertow: cookie smuggling/spoofing 7.4 High -
undertowDebian Undertow: unrestricted request storage leads to memory exhaustion 7.5 High -
undertowDebian Undertow: improper state management in proxy protocol parsing causes information leakage 7.5 High -
undertowDebian Undertow: learningpushhandler can lead to remote memory dos attacks 5.3 Medium -
undertowDebian Undertow: response write hangs in case of java 17 tlsv1.3 newsessionticket 7.5 High -
undertowDebian Undertow: url-encoded request path information can be broken on ajp-listener 7.5 High -
undertowDebian Undertow: out-of-memory error after several closed connections with wildfly-http-client protocol 7.5 High -
undertowDebian Undertow: directory traversal vulnerability 5.3 Medium -
undertowDebian Undertow: ajp request closes connection exceeding maxrequestsize 7.5 High -
undertowDebian Undertow: outofmemoryerror due to @multipartconfig handling 7.5 High -
undertowDebian Undertow: infinite loop in sslconduit during close 7.5 High -
undertowDebian Undertow client not checking server identity presented by server certificate in https connections 7.5 High -
undertowDebian A flaw was found in Undertow. Denial of service can be achieved as Undertow server waits for the... 4.9 Medium -
undertowDebian A flaw was found in Undertow. For an AJP 400 response, EAP 7 is improperly sending two response... 7.5 High -
undertowDebian Undertow vulnerable to Dos via Large AJP request 7.5 High -
undertowDebian Undertow vulnerable to Denial of Service (DoS) attacks 7.5 High -
undertowDebian Undertow vulnerable to memory exhaustion due to buffer leak 7.5 High -
undertowDebian undertow Race Condition vulnerability 5.9 Medium -
undertowDebian Undertow Uncontrolled Resource Consumption 5.9 Medium -
undertowDebian A flaw was found in Undertow when using Remoting as shipped in Red Hat Jboss EAP before version 7... 7.5 High -
undertowDebian Denial of service in Undertow 7.5 High -
undertowDebian HTTP request smuggling in Undertow 4.8 Medium -
undertowDebian HTTP Request Smuggling in Undertow 4.8 Medium -
undertowDebian Allocation of Resources Without Limits or Throttling in Undertow 7.5 High -
undertowDebian HTTP Request Smuggling in Undertow 6.5 Medium -
undertowDebian Improper Authorization in Undertoe 8.6 High -
undertowDebian Improper Input Validation in Undertow 8.1 High -
undertowDebian Undertow vulnerable to Uncontrolled Resource Consumption 7.5 High -
undertowDebian Potential to access user credentials from the log files when debug logging enabled 4.8 Medium -
undertowDebian Undertow Missing Authorization when requesting a protected directory without trailing slash 5.3 Medium -
undertowDebian Credential exposure through log files in Undertow 5.3 Medium -
undertowDebian Exposure of Sensitive Information to an Unauthorized Actor in Undertow 5.3 Medium -
undertowDebian Uncontrolled Resource Consumption in Undertow 6.5 Medium -
undertowDebian Undertow Request Smuggling vulnerability 2.6 Low - Show olderLoading…