Most recent entries from all

cnvd-2019-02507

2026-10-03T04:45:46.739582+00:00

cnvd-2019-02507

EUVD-2026-61060

2026-10-03T04:45:46.739623+00:00

EUVD-2026-61060

fkie_cve-2018-1114

2026-10-03T04:45:46.739637+00:00

It was found that URLResource.getLastModified() in Undertow closes the file descriptors only when they are finalized which can cause file descriptors to exhaust. This leads to a file handler leak.

GHSA-gjjx-gqm4-wcgm — Uncontrolled Resource Consumption in Undertow

2026-10-03T04:45:46.739667+00:00

Affected: Maven: io.undertow:undertow-core

It was found that URLResource.getLastModified() in Undertow closes the file descriptors only when they are finalized which can cause file descriptors to exhaust. This leads to a file handler leak.

gsd-2018-1114

2026-10-03T04:45:46.739692+00:00

gsd-2018-1114

RHSA-2018:2088 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.3 security update

2026-10-03T04:45:46.739705+00:00

undertow: File descriptor leak caused by JarURLConnection.getLastModified() allows attacker to cause a denial of service jackson-databind: incomplete fix for CVE-2017-7525 permits unsafe serialization via c3p0 libraries

UBUNTU-CVE-2018-1114

2026-10-03T04:45:46.739732+00:00

Affected: Ubuntu:Pro:16.04:LTS: undertow, Ubuntu:Pro:18.04:LTS: undertow, Ubuntu:Pro:20.04:LTS: undertow, Ubuntu:Pro:22.04:LTS: undertow, Ubuntu:Pro:24.04:LTS: undertow

It was found that URLResource.getLastModified() in Undertow closes the file descriptors only when they are finalized which can cause file descriptors to exhaust. This leads to a file handler leak.