Description

A flaw was found in JBossWeb in versions before 7.5.31.Final-redhat-3. The fix for CVE-2020-13935 was incomplete in JBossWeb, leaving it vulnerable to a denial of service attack when sending multiple requests with invalid payload length in a WebSocket frame. The highest threat from this vulnerability is to system availability.

Remediation

References

CVE-2020-14384

Related Vulnerabilities

WordPress Plugin Donation Forms by Charitable-Donations & Fundraising Platform for WordPress Privilege Escalation (1.7.0.12)

Drupal Other Vulnerability (CVE-2006-0070)

WordPress Plugin MAC PHOTO GALLERY 'upload-file.php' Arbitrary File Upload (2.7)

PHP Out-of-bounds Read Vulnerability (CVE-2017-9118)

Oracle JRE CVE-2018-2581 Vulnerability (CVE-2018-2581)

Severity

High

Classification

CVE-2020-14384 CWE-400 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Missing Update Known Vulnerabilities