Most recent entries from all

cnvd-2019-02507

EUVD-2026-61060

fkie_cve-2018-1114

It was found that URLResource.getLastModified() in Undertow closes the file descriptors only when they are finalized which can cause file descriptors to exhaust. This leads to a file handler leak.

GHSA-gjjx-gqm4-wcgm — Uncontrolled Resource Consumption in Undertow

Affected: Maven: io.undertow:undertow-core

It was found that URLResource.getLastModified() in Undertow closes the file descriptors only when they are finalized which can cause file descriptors to exhaust. This leads to a file handler leak.

gsd-2018-1114

RHSA-2018:2088 — Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.3 security update

undertow: File descriptor leak caused by JarURLConnection.getLastModified() allows attacker to cause a denial of service jackson-databind: incomplete fix for CVE-2017-7525 permits unsafe serialization via c3p0 libraries

UBUNTU-CVE-2018-1114

Affected: Ubuntu:Pro:16.04:LTS: undertow, Ubuntu:Pro:18.04:LTS: undertow, Ubuntu:Pro:20.04:LTS: undertow, Ubuntu:Pro:22.04:LTS: undertow, Ubuntu:Pro:24.04:LTS: undertow

It was found that URLResource.getLastModified() in Undertow closes the file descriptors only when they are finalized which can cause file descriptors to exhaust. This leads to a file handler leak.