| Package | Affected versions | Patched versions |
|---|---|---|
| io.undertow:undertow-core | ≥ 2.3.0, < 2.3.5.Final< 2.2.24.Final | 2.3.5.Final2.2.24.Final |
| decision manager | = 7.0 | |
| fuse | = 1.0.0 | |
| jboss enterprise application platform | = 7.4 | |
| openshift container platform | = 4.11= 4.12 | |
| openshift container platform for linuxone | = 4.10= 4.9 | |
| openshift container platform for power | = 4.10= 4.9 | |
| openstack platform | = 13.0 | |
| process automation | = 7.0 | |
| single sign-on | = 7.6 | |
| undertow | ≥ 2.3.0, < 2.3.5< 2.2.24 | 2.3.52.2.24 |
A flaw was found in undertow. This issue makes achieving a denial of service possible due to an unexpected handshake status updated in SslConduit, where the loop never terminates.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free