Description

A flaw was found in undertow. This issue makes achieving a denial of service possible due to an unexpected handshake status updated in SslConduit, where the loop never terminates.

Remediation

References

CVE-2023-1108

Related Vulnerabilities

Restlet Framework XML Injection (aka Blind XPath Injection) Vulnerability (CVE-2013-4221)

Oracle Application Server CVE-2009-0996 Vulnerability (CVE-2009-0996)

Oracle Database Server Cryptographic Issues Vulnerability (CVE-2006-0270)

WordPress Plugin Events Manager Extended Multiple HTML Injection Vulnerabilities (3.1.2)

Oracle HTTP Server Other Vulnerability (CVE-2006-5347)

Severity

High

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Missing Update Known Vulnerabilities CWE-835 CVE-2023-1108