CVE-2020-25644CWE-401

A memory leak flaw was found in WildFly OpenSSL in versions prior to 1.1.3.Final, where it removes an HTTP session

published October 6, 2020

CVSS
—
EPSS
2%
Percentile
83.7
In the wild
Unconfirmed
What it is

A memory leak flaw was found in WildFly OpenSSL in versions prior to 1.1.3.Final, where it removes an HTTP session. It may allow the attacker to cause OOM leading to a denial of service. The highest threat from this vulnerability is to system availability.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02365 · 83.7th percentile
Weakness
CWE-401 · Missing Release of Memory after Effective Lifetime
Published
2020-10-06T00:00Z
EPSS history
Timeline
  • 06 OCT 00:00Z
    A memory leak flaw was found in WildFly OpenSSL in versions prior to 1.1.3.Final, where it removes an HTTP session
    cvelistv5