| Package | Affected versions | Patched versions |
|---|---|---|
| org.wildfly:wildfly-dist | < 21.0.1 | 21.0.1 |
| fuse | = 6.0.0 | |
| jboss data grid | = 7.0.0 | |
| jboss enterprise application platform | = 7.0.0 | |
| jboss fuse | = 7.0.0 | |
| single sign-on | = 7.0 | |
| wildfly | ≤ 21.0.0 |
A memory leak flaw was found in WildFly in all versions up to 21.0.0.Final, where host-controller tries to reconnect in a loop, generating new connections which are not properly closed while not able to connect to domain-controller. This flaw allows an attacker to cause an Out of memory (OOM) issue, leading to a denial of service. The highest threat from this vulnerability is to system availability.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free