~ / search / GHSA-qcch-9268-59jw

GHSA-qcch-9268-59jw

Wildfly EJB Client causes DoS

Source: GitHub Advisory Database (reviewed) Moderate CVE-2020-14297

Packages

EcosystemPackageAffectedFixed in
Maven org.jboss:jboss-ejb-client < 4.0.34.Final 4.0.34.Final

Details

As written in the advisory (Markdown source, shown as plain text).

A flaw was discovered in Wildfly's EJB Client as shipped with Red Hat JBoss EAP 7, where some specific EJB transaction objects may get accumulated over the time and can cause services to slow down and eventually unavailable. An attacker can take advantage and cause denial of service attack and make services unavailable.

References

External links from the advisory. They lead to third-party sites.