Undertow denial of service vulnerability
High severity
GitHub Reviewed
Published
Sep 14, 2023
to the GitHub Advisory Database
•
Updated May 3, 2024
Package
Affected versions
>= 2.3.0, < 2.3.5.Final
< 2.2.24.Final
Patched versions
2.3.5.Final
2.2.24.Final
Description
Published by the National Vulnerability Database
Sep 14, 2023
Published to the GitHub Advisory Database
Sep 14, 2023
Reviewed
Sep 15, 2023
Last updated
May 3, 2024
A flaw was found in undertow. This issue makes achieving a denial of service possible due to an unexpected handshake status updated in SslConduit, where the loop never terminates.
References