5.3
Moyenne
CVE-2018-14642 An information leak vulnerability was found in Undertow
Description
An information leak vulnerability was found in Undertow. If all headers are not written out in the first write() call then the code that handles flushing the buffer will always write out the full contents of the writevBuffer buffer, which may contain data from previous requests.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| undertow | Versions non publiées |
Autres CVE de undertow
Les 7 CVE de undertow →
CVE-2020-10719
A flaw was found in Undertow in versions before 2.1.1.Final, regarding the processing of invalid HTTP requests with…
6.5
Moyenne
CVE-2020-1757
A flaw was found in all undertow-2.x.x SP1 versions prior to undertow-2.0.30.SP1, all undertow-1.x.x and…
8.1
Élevée
CVE-2019-14888
A vulnerability was found in the Undertow HTTP server in versions before 2.0.28.SP1 when listening on HTTPS
7.5
Élevée
CVE-2019-3888
A vulnerability was found in Undertow web server before 2.0.21
5.3
Moyenne