Skip to content
Sign in
7.5 High

CVE-2017-2670 It was found in Undertow before 1.3.28 that with non-clean TCP close, the Websocket server gets into infinite loop on…

Description

It was found in Undertow before 1.3.28 that with non-clean TCP close, the Websocket server gets into infinite loop on every IO thread, effectively causing DoS.

Affected products and versions

Product Affected versions Fixed in
undertow 1.3.28.Final-redhat-4 No fix stated

Other CVEs of undertow

The 3 CVEs of undertow →
CVE-2017-2666 It was discovered in Undertow that the code that parsed the HTTP request line permitted invalid characters 6.5 Medium CVE-2018-1067 In Undertow before versions 7.1.2.CR1, 7.1.2.GA it was found that the fix for CVE-2016-4993 was incomplete and… 5.4 Medium
Track this CVE