| Package | Affected versions | Patched versions |
|---|---|---|
| jboss-remoting | = 5.0.14< 5.0.14 | 5.0.14 |
| jboss enterprise application platform | < 7.2.4 | 7.2.4 |
| undertow | = 2.0.25< 2.0.25 | 2.0.25 |
A flaw was found in Undertow when using Remoting as shipped in Red Hat Jboss EAP before version 7.2.4. A memory leak in HttpOpenListener due to holding remote connections indefinitely may lead to denial of service. Versions before undertow 2.0.25.SP1 and jboss-remoting 5.0.14.SP1 are believed to be vulnerable.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free