~ / search / GHSA-97hp-6q9g-5cw2

GHSA-97hp-6q9g-5cw2

Uncontrolled Resource Consumption in WildFly

Source: GitHub Advisory Database (reviewed) Moderate CVE-2020-25689

Packages

EcosystemPackageAffectedFixed in
Maven org.wildfly:wildfly-dist < 21.0.1 21.0.1

Details

As written in the advisory (Markdown source, shown as plain text).

A memory leak flaw was found in WildFly in all versions up to 21.0.0.Final, where host-controller tries to reconnect in a loop, generating new connections which are not properly closed while not able to connect to domain-controller. This flaw allows an attacker to cause an Out of memory (OOM) issue, leading to a denial of service. The highest threat from this vulnerability is to system availability.

References

External links from the advisory. They lead to third-party sites.