Description

A flaw was found in Undertow. Denial of service can be achieved as Undertow server waits for the LAST_CHUNK forever for EJB invocations.

Remediation

References

CVE-2022-2764

Related Vulnerabilities

PostgreSQL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-15098)

WordPress Plugin BackWPup Unspecified Vulnerability (3.3)

WordPress Plugin Gravity Forms Advanced File Uploader Unspecified Vulnerability (1.18)

PrestaShop Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2021-3110)

Oracle Database Server CVE-2008-1821 Vulnerability (CVE-2008-1821)

Severity

Medium

Classification

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Tags

Missing Update Known Vulnerabilities CVE-2022-2764