Undertow OutOfMemory when parsing form data encoding with application/x-www-form-urlencoded

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2024-3884 · ADVISORY
• undertow-io/undertow#1894 · WEB
• undertow-io/undertow#1882 · WEB
• undertow-io/undertow#1860 · WEB
• undertow-io/undertow#1856 · WEB
• undertow-io/undertow commit cb854c7 · WEB
• undertow-io/undertow release 2.4.0.Beta1 · WEB
• undertow-io/undertow release 2.3.21.Final · WEB
• undertow-io/undertow release 2.2.39.Final · WEB
• undertow-io/undertow · PACKAGE
• bugzilla.redhat.com/show_bug.cgi · WEB
• access.redhat.com/security/cve/CVE-2024-3884 · WEB

Lỗ hổng khác của io.undertow:undertow-core

• CVE-2024-4027CAO 7.5A flaw was found in Undertow. Servlets using a method that calls HttpServletRequestImpl.getParameterNames() can cause an OutOfMemoryError wh…
• CVE-2025-12543NGHIÊM TRỌNG 9.6A flaw was found in the Undertow HTTP server core, which is used in WildFly, JBoss EAP, and other Java applications. The Undertow library fa…
• CVE-2025-9784CAO 7.5A flaw was found in Undertow where malformed client requests can trigger server-side stream resets without triggering abuse counters. This i…
• CVE-2023-4639CAO 7.4A flaw was found in Undertow, which incorrectly parses cookies with certain value-delimiting characters in incoming requests. This issue cou…
• CVE-2023-1973CAO 7.5A flaw was found in Undertow package. Using the FormAuthenticationMechanism, a malicious user could trigger a Denial of Service by sending c…