Skip to content

Known vulnerabilities in Red Hat undertow

Is your version affected?

CVE Summary Score Published
CVE-2020-10719 A flaw was found in Undertow in versions before 2.1.1.Final, regarding the processing of invalid HTTP requests with… 6.5 Medium May 26, 2020
CVE-2020-1757 A flaw was found in all undertow-2.x.x SP1 versions prior to undertow-2.0.30.SP1, all undertow-1.x.x and… 8.1 High Apr 21, 2020
CVE-2019-14888 A vulnerability was found in the Undertow HTTP server in versions before 2.0.28.SP1 when listening on HTTPS 7.5 High Jan 23, 2020
CVE-2019-3888 A vulnerability was found in Undertow web server before 2.0.21 5.3 Medium Jun 12, 2019
CVE-2018-14642 An information leak vulnerability was found in Undertow 5.3 Medium Sep 18, 2018
CVE-2018-1114 It was found that URLResource.getLastModified() in Undertow closes the file descriptors only when they are finalized… 6.5 Medium Sep 11, 2018
CVE-2017-12165 It was discovered that Undertow before 1.4.17, 1.3.31 and 2.0.0 processes http request headers with unusual… 2.6 Low Jul 27, 2018

Other Red Hat products