~ / search / GHSA-qx3p-9mmp-4v8h

GHSA-qx3p-9mmp-4v8h

Wildfly has a memory leak vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2020-27822

Packages

EcosystemPackageAffectedFixed in
Maven org.wildfly:wildfly-parent >= 19.0.0.Final, < 21.0.2.Final 21.0.2.Final
Maven org.wildfly:wildfly-parent >= 22.0.0.Alpha1, < 22.0.0.Beta1 22.0.0.Beta1

Details

As written in the advisory (Markdown source, shown as plain text).

A flaw was found in Wildfly affecting versions 19.0.0.Final, 19.1.0.Final, 20.0.0.Final, 20.0.1.Final, and 21.0.0.Final. When an application uses the OpenTracing API's java-interceptors, there is a possibility of a memory leak. This flaw allows an attacker to impact the availability of the server. The highest threat from this vulnerability is to system availability.

References

External links from the advisory. They lead to third-party sites.