| Package | Affected versions | Patched versions |
|---|---|---|
| io.undertow:undertow-core | ≥ 2.0.0.Alpha1, < 2.0.5.Final< 1.4.25.Final | 2.0.5.Final1.4.25.Final |
| virtualization | = 4.0= 4.2 | |
| virtualization host | = 4.0 |
It was found that URLResource.getLastModified() in Undertow closes the file descriptors only when they are finalized which can cause file descriptors to exhaust. This leads to a file handler leak.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free