| Package | Affected versions | Patched versions |
|---|---|---|
| org.wildfly.openssl:wildfly-openssl-natives-parent | < 1.1.3.Final | 1.1.3.Final |
| data grid | = 8.0 | |
| jboss data grid | = 7.0.0 | |
| jboss enterprise application platform | = 7.0.0 | |
| jboss fuse | = 7.0.0 | |
| single sign-on | = 7.0 | |
| wildfly openssl | < 1.1.3 | 1.1.3 |
A memory leak flaw was found in WildFly OpenSSL in versions prior to 1.1.3.Final, where it removes an HTTP session. It may allow the attacker to cause OOM leading to a denial of service. The highest threat from this vulnerability is to system availability.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free