7.5
Élevée
CVE-2026-15561 A flaw was found in EAP's undertow http/1.1 chunked-transfer decoder
Description
A flaw was found in EAP's undertow http/1.1 chunked-transfer decoder. missing limits on size and count would allow an attacker to use an unauthenticated connection to drive the JVM to an OutOfMemory error, stopping all deployments on the listener, and achieving Denial of Service.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Red Hat JBoss Enterprise Application Platform 7 | Versions non publiées | |
| Red Hat JBoss Enterprise Application Platform 8 | Versions non publiées | |
| Red Hat JBoss Enterprise Application Platform Expansion Pack | Versions non publiées | |
| Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7 | Versions non publiées | |
| Red Hat JBoss Enterprise Application Platform 7.4.25 | Versions non publiées | |
| Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8 | Versions non publiées | |
| Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9 | Versions non publiées | |
| Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 10 | Versions non publiées | |
| Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8 | Versions non publiées |
Afficher les 3 autres branches Masquer les 3 autres branches
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9 | Versions non publiées | |
| Red Hat JBoss Enterprise Application Platform 8.1 | Versions non publiées | |
| Red Hat JBoss Enterprise Application Platform 8.1.8.GA 2.3 | premières → < 2.3.26.SP3-redhat-00001 | 2.3.26.SP3-redhat-00001 |
Références
- RHSA-2026:53644 access.redhat.com
- RHSA-2026:53806 access.redhat.com
- RHSA-2026:70228 access.redhat.com
- RHSA-2026:70229 access.redhat.com
- RHSA-2026:70230 access.redhat.com
- RHSA-2026:70277 access.redhat.com
- access.redhat.com access.redhat.com
- RHBZ#2483133 bugzilla.redhat.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Red Hat JBoss Enterprise Application Platform 7
Les 168 CVE de Red Hat JBoss Enterprise Application Platform 7 →
CVE-2026-96453
Org.keycloak/keycloak-admin-cli: keycloak-admin-cli: kcadm custom truststore accepts arbitrary self-signed certificates
8.0
Élevée
CVE-2026-93998
Keycloak-core: keycloak-core: saml adapter does not bind signed assertions to the configured identity provider issuer
7.4
Élevée
CVE-2026-91920
Undertow: undertow: chunkreader message length permits chunk-size overflow
6.5
Moyenne
CVE-2026-114488
A flaw was found in Wildfly
7.4
Élevée