CVE-2024-4029CWE-770denial-of-service

CVE-2024-4029

Medium · published May 2, 2024

CVSS v3.1
4.1
EPSS
0%
Percentile
19.1
In the wild
Unconfirmed
What it is

A vulnerability was found in Wildfly’s management interface. Due to the lack of limitation of sockets for the management interface, it may be possible to cause a denial of service hitting the nofile limit as there is no possibility to configure or set a maximum number of connections.

The record
Technical detail
CVSS v3.1
4.1 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00277 · 19.1th percentile
Weakness
CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2024-05-02T19:15Z
References (14)
https://access.redhat.com/errata/RHSA-2024:8075 · [email protected]https://access.redhat.com/errata/RHSA-2024:8076 · [email protected]https://access.redhat.com/errata/RHSA-2024:8077 · [email protected]https://access.redhat.com/errata/RHSA-2024:8080 · [email protected]https://access.redhat.com/errata/RHSA-2024:8823 · [email protected]https://access.redhat.com/errata/RHSA-2024:8824 · [email protected]https://access.redhat.com/errata/RHSA-2024:8826 · [email protected]https://access.redhat.com/security/cve/CVE-2024-4029 · [email protected]https://bugzilla.redhat.com/show_bug.cgi?id=2278615 · [email protected]https://github.com/advisories/GHSA-x7g6-rwhc-g7mj · [email protected]https://github.com/wildfly/wildfly/pull/17914 · [email protected]https://github.com/wildfly/wildfly/pull/17935 · [email protected]https://access.redhat.com/security/cve/CVE-2024-4029 · af854a3a-2127-422b-91ae-364da2661108https://bugzilla.redhat.com/show_bug.cgi?id=2278615 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 02 MAY 14:55Z
    Wildfly: no timeout for eap management interface may lead to denial of service (dos)
    cvelistv5