| Package | Affected versions | Patched versions |
|---|---|---|
| io.undertow:undertow-core | ≥ 2.2.0, < 2.2.10< 2.0.40 | 2.2.102.0.40 |
| fuse | = 1.0 | |
| jboss enterprise application platform | = 7.3= 7.4 | |
| undertow | ≥ 2.1.0, < 2.2.10< 2.0.40 | 2.2.102.0.40 |
Buffer leak on incoming WebSocket PONG message(s) in Undertow before 2.0.40 and 2.2.10 can lead to memory exhaustion and allow a denial of service.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free