~ / search / GHSA-m4mm-pg93-fv78

GHSA-m4mm-pg93-fv78

Undertow denial of service vulnerability

Source: GitHub Advisory Database (reviewed) High CVE-2023-1108

Packages

EcosystemPackageAffectedFixed in
Maven io.undertow:undertow-core >= 2.3.0, < 2.3.5.Final 2.3.5.Final
Maven io.undertow:undertow-core < 2.2.24.Final 2.2.24.Final

Details

As written in the advisory (Markdown source, shown as plain text).

A flaw was found in undertow. This issue makes achieving a denial of service possible due to an unexpected handshake status updated in SslConduit, where the loop never terminates.

References

External links from the advisory. They lead to third-party sites.