undertow vulnerabilities (Ubuntu)
60 vulnerabilities.
-
undertowUbuntu Undertow: undertow: chunkreader message length permits chunk-size overflow 6.5 Medium -
undertowUbuntu Undertow: undertow: pathresourcemanager safepaths check allows sibling-directory symlink traversal 3.7 Low -
undertowUbuntu Undertow-core: undertow: websocketcontainer defaults for buffers and timeouts are infinite 7.5 High -
undertowUbuntu Undertow-core: undertow: denial of service via websocket permessage-deflate processing 7.5 High -
undertowUbuntu Io.undertow/undertow: undertow: http response header integrity issue due to character truncation 5.3 Medium -
undertowUbuntu Undertow-core: undertow:http request smuggling via oversized chunk-size bit overlap 5.3 Medium -
undertowUbuntu Undertow: undertow-websockets: undertow: pre-auth dos on websocket endpoint with @serverendpoint class with any @onmessage method 7.5 High -
undertowUbuntu Undertow-core: oom via missing limits in chunked trailer in eap's undertow 7.5 High -
undertowUbuntu Undertow-core: undertow: authentication bypass via ajp ssl_cert/is_ssl forgery 7.4 High -
undertowUbuntu Undertow: undertow: request smuggling via malformed http request headers 8.7 High -
undertowUbuntu Undertow: undertow: request smuggling via `\r\r\r` as a header block terminator 8.7 High -
undertowUbuntu Undertow: undertow: request smuggling via inconsistent header parsing 8.7 High -
undertowUbuntu Undertow: outofmemoryerror in httpservletrequestimpl.getparameternames() can cause remote dos attacks 7.5 High -
undertowUbuntu Undertow-core: undertow http server fails to reject malformed host headers leading to potential cache poisoning and ssrf 9.6 Critical -
undertowUbuntu Undertow: outofmemory when parsing form data encoding with application/x-www-form-urlencoded 7.5 High -
undertowUbuntu Undertow: undertow madeyoureset http/2 ddos vulnerability 7.5 High -
undertowUbuntu Undertow: cookie smuggling/spoofing 7.4 High -
undertowUbuntu Undertow: unrestricted request storage leads to memory exhaustion 7.5 High -
undertowUbuntu Undertow: improper state management in proxy protocol parsing causes information leakage 7.5 High -
undertowUbuntu Undertow: learningpushhandler can lead to remote memory dos attacks 5.3 Medium -
undertowUbuntu Undertow: response write hangs in case of java 17 tlsv1.3 newsessionticket 7.5 High -
undertowUbuntu Undertow: url-encoded request path information can be broken on ajp-listener 7.5 High -
undertowUbuntu Undertow: out-of-memory error after several closed connections with wildfly-http-client protocol 7.5 High -
undertowUbuntu Undertow: directory traversal vulnerability 5.3 Medium -
undertowUbuntu Undertow: ajp request closes connection exceeding maxrequestsize 7.5 High -
undertowUbuntu Undertow: outofmemoryerror due to @multipartconfig handling 7.5 High -
undertowUbuntu Undertow: infinite loop in sslconduit during close 7.5 High -
undertowUbuntu Undertow client not checking server identity presented by server certificate in https connections 7.5 High -
undertowUbuntu A flaw was found in Undertow. Denial of service can be achieved as Undertow server waits for the... 4.9 Medium -
undertowUbuntu A flaw was found in Undertow. For an AJP 400 response, EAP 7 is improperly sending two response... 7.5 High -
undertowUbuntu A flaw was found in Undertow. A potential security issue in flow control handling by the browser... 7.5 High -
undertowUbuntu Undertow vulnerable to Dos via Large AJP request 7.5 High -
undertowUbuntu Undertow vulnerable to Denial of Service (DoS) attacks 7.5 High -
undertowUbuntu Undertow vulnerable to memory exhaustion due to buffer leak 7.5 High -
undertowUbuntu undertow Race Condition vulnerability 5.9 Medium -
undertowUbuntu Undertow Uncontrolled Resource Consumption 5.9 Medium -
undertowUbuntu A flaw was found in Undertow when using Remoting as shipped in Red Hat Jboss EAP before version 7... 7.5 High -
undertowUbuntu Denial of service in Undertow 7.5 High -
undertowUbuntu HTTP request smuggling in Undertow 4.8 Medium -
undertowUbuntu HTTP Request Smuggling in Undertow 4.8 Medium -
undertowUbuntu Allocation of Resources Without Limits or Throttling in Undertow 7.5 High -
undertowUbuntu HTTP Request Smuggling in Undertow 6.5 Medium -
undertowUbuntu Improper Authorization in Undertoe 8.6 High -
undertowUbuntu Improper Input Validation in Undertow 8.1 High -
undertowUbuntu Undertow vulnerable to Uncontrolled Resource Consumption 7.5 High -
undertowUbuntu Potential to access user credentials from the log files when debug logging enabled 4.8 Medium -
undertowUbuntu Undertow Missing Authorization when requesting a protected directory without trailing slash 5.3 Medium -
undertowUbuntu Credential exposure through log files in Undertow 5.3 Medium -
undertowUbuntu Exposure of Sensitive Information to an Unauthorized Actor in Undertow 5.3 Medium -
undertowUbuntu Uncontrolled Resource Consumption in Undertow 6.5 Medium - Show olderLoading…