Skip to content
fr Sign in
7.5 High

CVE-2023-1108 A flaw was found in undertow

Description

A flaw was found in undertow. This issue makes achieving a denial of service possible due to an unexpected handshake status updated in SslConduit, where the loop never terminates.

Affected products and versions

Product Affected versions Fixed in
EAP 7.4.10 release Versions not published
Red Hat Fuse 7.12 Versions not published
Red Hat JBoss Enterprise Application Platform 7.1.0 Versions not published
Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8 Versions not published
Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9 Versions not published
Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7 Versions not published
Red Hat Single Sign-On 7 Versions not published
Red Hat Single Sign-On 7.6 for RHEL 7 Versions not published
Red Hat Single Sign-On 7.6 for RHEL 8 Versions not published
Show the 13 other branches
Product Affected versions Fixed in
Red Hat Single Sign-On 7.6 for RHEL 9 Versions not published
Red Hat support for Spring Boot 2.7.13 Versions not published
RHEL-8 based Middleware Containers 7.6 earliest → < 7.6-24 7.6-24
RHPAM 7.13.1 async Versions not published
Red Hat build of Quarkus Versions not published
Red Hat Data Grid 8 Versions not published
Red Hat Integration Camel K Versions not published
Red Hat Integration Camel Quarkus Versions not published
Red Hat Integration Service Registry Versions not published
Red Hat JBoss Data Grid 7 Versions not published
Red Hat JBoss Enterprise Application Platform Expansion Pack Versions not published
Red Hat JBoss Fuse 6 Versions not published
Red Hat OpenStack Platform 13 (Queens) Versions not published

References

Timeline

  1. Published
  2. Last modified
Track this CVE