https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 20:50:37 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-365383 EUVD-2026-365383 https://cve.radiocsirt.org/vuln/euvd-2026-365383 https://cve.radiocsirt.org/vuln/fkie_cve-2024-3653 <p>A vulnerability was found in Undertow. This issue requires enabling the learning-push handler in the server&#39;s config, which is disabled by default, leaving the maxAge config in the handler unconfigured. The default is -1, which makes the handler vulnerable. If someone overwrites that config, the server is not subject to the attack. The attacker needs to be able to reach the server with a normal HTTP request.</p> <p>A vulnerability was found in Undertow. This issue requires enabling the learning-push handler in the server&#39;s config, which is disabled by default, leaving the maxAge config in the handler unconfigured. The default is -1, which makes the handler vulnerable. If someone overwrites that config, the server is not subject to the attack. The attacker needs to be able to reach the server with a normal HTTP request.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-3653 https://cve.radiocsirt.org/vuln/ghsa-ch7q-gpff-h9hp <p><strong>Affected:</strong> Maven: io.undertow:undertow-core</p> <p>A vulnerability was found in Undertow. This issue requires enabling the learning-push handler in the server&#39;s config, which is disabled by default, leaving the maxAge config in the handler unconfigured. The default is -1, which makes the handler vulnerable. If someone overwrites that config, the server is not subject to the attack. The attacker needs to be able to reach the server with a normal HTTP request.</p> <p><strong>Affected:</strong> Maven: io.undertow:undertow-core</p> <p>A vulnerability was found in Undertow. This issue requires enabling the learning-push handler in the server&#39;s config, which is disabled by default, leaving the maxAge config in the handler unconfigured. The default is -1, which makes the handler vulnerable. If someone overwrites that config, the server is not subject to the attack. The attacker needs to be able to reach the server with a normal HTTP request.</p> https://cve.radiocsirt.org/vuln/ghsa-ch7q-gpff-h9hp https://cve.radiocsirt.org/vuln/gsd-2024-3653 gsd-2024-3653 https://cve.radiocsirt.org/vuln/gsd-2024-3653 https://cve.radiocsirt.org/vuln/rhsa-2024:4392 <p>jose4j: denial of service via specially crafted JWE undertow: LearningPushHandler can lead to remote memory DoS attacks undertow: response write hangs in case of Java 17 TLSv1.3 NewSessionTicket httpd: CONTINUATION frames DoS</p> <p>jose4j: denial of service via specially crafted JWE undertow: LearningPushHandler can lead to remote memory DoS attacks undertow: response write hangs in case of Java 17 TLSv1.3 NewSessionTicket httpd: CONTINUATION frames DoS</p> https://cve.radiocsirt.org/vuln/rhsa-2024:4392 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-3653 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: undertow, Ubuntu:Pro:18.04:LTS: undertow, Ubuntu:Pro:20.04:LTS: undertow, Ubuntu:Pro:22.04:LTS: undertow, Ubuntu:Pro:24.04:LTS: undertow, Ubuntu:25.10: undertow, Ubuntu:26.04:LTS: undertow</p> <p>A vulnerability was found in Undertow. This issue requires enabling the learning-push handler in the server&#39;s config, which is disabled by default, leaving the maxAge config in the handler unconfigured. The default is -1, which makes the handler vulnerable. If someone overwrites that config, the server is not subject to the attack. The attacker needs to be able to reach the server with a normal HTTP request.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: undertow, Ubuntu:Pro:18.04:LTS: undertow, Ubuntu:Pro:20.04:LTS: undertow, Ubuntu:Pro:22.04:LTS: undertow, Ubuntu:Pro:24.04:LTS: undertow, Ubuntu:25.10: undertow, Ubuntu:26.04:LTS: undertow</p> <p>A vulnerability was found in Undertow. This issue requires enabling the learning-push handler in the server&#39;s config, which is disabled by default, leaving the maxAge config in the handler unconfigured. The default is -1, which makes the handler vulnerable. If someone overwrites that config, the server is not subject to the attack. The attacker needs to be able to reach the server with a normal HTTP request.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-3653 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-2206 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat JBoss Enterprise Application Platform ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat JBoss Enterprise Application Platform ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-2206