Not rated
CVE-2022-1319 A flaw was found in Undertow
Description
A flaw was found in Undertow. For an AJP 400 response, EAP 7 is improperly sending two response packets, and those packets have the reuse flag set even though JBoss EAP closes the connection. A failure occurs when the connection is reused after a 400 by CPING since it reads in the second SEND_HEADERS response packet instead of a CPONG.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Undertow | Versions not published |
References
- bugzilla.redhat.com bugzilla.redhat.com
- issues.redhat.com issues.redhat.com
- github.com github.com
- github.com github.com
- access.redhat.com access.redhat.com
- security.netapp.com security.netapp.com
Timeline
- Published
- Last modified
Other CVEs of Undertow
The 14 CVEs of Undertow →
CVE-2022-4492
The undertow client is not checking the server identity presented by the server certificate in https connections
Not rated
CVE-2022-2764
A flaw was found in Undertow
Not rated
CVE-2022-1259
A flaw was found in Undertow
Not rated
CVE-2021-3859
A flaw was found in Undertow that tripped the client-side invocation timeout with certain calls made over HTTP2
Not rated