CVE-2016-9589CWE-400

Undertow in Red Hat wildfly before version 11.0.0.Beta1 is vulnerable to a resource exhaustion resulting in a denial of service

published March 12, 2018

CVSS
—
EPSS
3%
Percentile
87.0
In the wild
Unconfirmed
What it is

Undertow in Red Hat wildfly before version 11.0.0.Beta1 is vulnerable to a resource exhaustion resulting in a denial of service. Undertow keeps a cache of seen HTTP headers in persistent connections. It was found that this cache can easily exploited to fill memory with garbage, up to "max-headers" (default 200) * "max-header-size" (default 1MB) per active TCP connection.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02965 · 87.0th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2018-03-12T15:00Z
EPSS history
Timeline
  • 12 MAR 15:00Z
    Undertow in Red Hat wildfly before version 11.0.0.Beta1 is vulnerable to a resource exhaustion resulting in a denial of service
    cvelistv5