Description

A flaw was found in Undertow. Denial of service can be achieved as Undertow server waits for the LAST_CHUNK forever for EJB invocations.

Remediation

References

CVE-2022-2764

Related Vulnerabilities

WordPress Plugin WPMktgEngine Security Bypass (3.7.6)

OpenSSL Improper Certificate Validation Vulnerability (CVE-2021-3450)

Drupal Core 8.6.x Directory Traversal (8.6.0 - 8.6.15)

TYPO3 Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-3717)

PHP Other Vulnerability (CVE-2007-1889)

Severity

Medium

Classification

CVE-2022-2764 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Tags

Missing Update Known Vulnerabilities