Description
A flaw was found in Undertow when using Remoting as shipped in Red Hat Jboss EAP before version 7.2.4. A memory leak in HttpOpenListener due to holding remote connections indefinitely may lead to denial of service. Versions before undertow 2.0.25.SP1 and jboss-remoting 5.0.14.SP1 are believed to be vulnerable.
Remediation
References
Related Vulnerabilities
Internet Information Services Other Vulnerability (CVE-2000-0746)
Oracle Database Server CVE-2008-1818 Vulnerability (CVE-2008-1818)
Collabtive Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2015-0258)
Oracle Database Server CVE-2015-0370 Vulnerability (CVE-2015-0370)
WordPress Plugin AdSense Manager Cross-Site Scripting (4.0.3)