| Package | Affected versions | Patched versions |
|---|---|---|
| io.undertow:undertow-core | < 1.3.28 | 1.3.28 |
| jboss enterprise application platform | = 6.0.0= 7.0.0= 7.1.0 | |
| undertow | < 1.3.28 | 1.3.28 |
It was found in Undertow before 1.3.28 that with non-clean TCP close, the Websocket server gets into infinite loop on every IO thread, effectively causing DoS.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free