Non notée
CVE-2022-1319 A flaw was found in Undertow
Description
A flaw was found in Undertow. For an AJP 400 response, EAP 7 is improperly sending two response packets, and those packets have the reuse flag set even though JBoss EAP closes the connection. A failure occurs when the connection is reused after a 400 by CPING since it reads in the second SEND_HEADERS response packet instead of a CPONG.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Undertow | Versions non publiées |
Références
- bugzilla.redhat.com bugzilla.redhat.com
- issues.redhat.com issues.redhat.com
- github.com github.com
- github.com github.com
- access.redhat.com access.redhat.com
- security.netapp.com security.netapp.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Undertow
Les 14 CVE de Undertow →
CVE-2022-4492
The undertow client is not checking the server identity presented by the server certificate in https connections
Non notée
CVE-2022-2764
A flaw was found in Undertow
Non notée
CVE-2022-1259
A flaw was found in Undertow
Non notée
CVE-2021-3859
A flaw was found in Undertow that tripped the client-side invocation timeout with certain calls made over HTTP2
Non notée