A flaw was found in Undertow. Denial of service can be achieved as Undertow server waits for the LAST_CHUNK forever for EJB invocations.
References
| Link | Resource |
|---|---|
| https://bugzilla.redhat.com/show_bug.cgi?id=2117506 | Issue Tracking Vendor Advisory |
| https://security.netapp.com/advisory/ntap-20221014-0006/ | Third Party Advisory |
| https://bugzilla.redhat.com/show_bug.cgi?id=2117506 | Issue Tracking Vendor Advisory |
| https://security.netapp.com/advisory/ntap-20221014-0006/ | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
21 Nov 2024, 07:01
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://bugzilla.redhat.com/show_bug.cgi?id=2117506 - Issue Tracking, Vendor Advisory | |
| References | () https://security.netapp.com/advisory/ntap-20221014-0006/ - Third Party Advisory |
07 Nov 2022, 19:12
| Type | Values Removed | Values Added |
|---|---|---|
| References | (CONFIRM) https://security.netapp.com/advisory/ntap-20221014-0006/ - Third Party Advisory | |
| CPE | cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:cloud_secure_agent:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:linux:*:* cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:* cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:* |
14 Oct 2022, 13:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
07 Sep 2022, 19:37
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:redhat:jboss_fuse:7.0.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.0.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:undertow:2.3.0:alpha1:*:*:*:*:*:* cpe:2.3:a:redhat:undertow:2.3.0:alpha2:*:*:*:*:*:* cpe:2.3:a:redhat:single_sign-on:7.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:integration_camel_k:-:*:*:*:*:*:*:* cpe:2.3:a:redhat:undertow:*:*:*:*:*:*:*:* |
|
| CWE | NVD-CWE-noinfo | |
| References | (MISC) https://bugzilla.redhat.com/show_bug.cgi?id=2117506 - Issue Tracking, Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.9 |
02 Sep 2022, 12:56
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-09-01 21:15
Updated : 2024-11-21 07:01
NVD link : CVE-2022-2764
Mitre link : CVE-2022-2764
CVE.ORG link : CVE-2022-2764
JSON object : View
Products Affected
redhat
- jboss_fuse
- single_sign-on
- integration_camel_k
- undertow
- jboss_enterprise_application_platform
netapp
- cloud_secure_agent
- oncommand_insight
- oncommand_workflow_automation
- active_iq_unified_manager
CWE