Most recent entries from all

bdu:2023-01996

EUVD-2026-6618

fkie_cve-2023-1108

A flaw was found in undertow. This issue makes achieving a denial of service possible due to an unexpected handshake status updated in SslConduit, where the loop never terminates.

GHSA-m4mm-pg93-fv78 — Undertow denial of service vulnerability

Affected: Maven: io.undertow:undertow-core

A flaw was found in undertow. This issue makes achieving a denial of service possible due to an unexpected handshake status updated in SslConduit, where the loop never terminates.

gsd-2023-1108

OESA-2023-1202 — undertow security update

Affected: openEuler:20.03-LTS-SP1: undertow, openEuler:20.03-LTS-SP3: undertow, openEuler:22.03-LTS: undertow, openEuler:22.03-LTS-SP1: undertow

Java web server using non-blocking IO Security Fix(es): A flaw was found in undertow. This issue makes achieving a denial of service possible due to an unexpected handshake status updated in SslConduit, where the loop never terminates.(CVE-2023-1108)

RHSA-2023:1184 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4 security update

Undertow: Infinite loop in SslConduit during close

UBUNTU-CVE-2023-1108

Affected: Ubuntu:Pro:16.04:LTS: undertow, Ubuntu:Pro:18.04:LTS: undertow, Ubuntu:Pro:20.04:LTS: undertow, Ubuntu:Pro:22.04:LTS: undertow, Ubuntu:Pro:24.04:LTS: undertow, Ubuntu:25.10: undertow, Ubuntu:26.04:LTS: undertow

A flaw was found in undertow. This issue makes achieving a denial of service possible due to an unexpected handshake status updated in SslConduit, where the loop never terminates.

WID-SEC-W-2023-0611 — Red Hat JBoss Enterprise Application Platform: Schwachstelle ermöglicht Denial of Service

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat JBoss Enterprise Application Platform ausnutzen, um einen Denial of Service Angriff durchzuführen.