HIGH✓ PATCH🇬🇧 English

CVE-2023-1108

CVSS 7.5v3.1pub. 2023-09-14upd. 2024-11-21

A flaw was found in undertow. This issue makes achieving a denial of service possible due to an unexpected handshake status updated in SslConduit, where the loop never terminates.

oryginał EN

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Netapp Oncommand Workflow Automation
APP
Netapp
wszystkie wersje
Red Hat Build Of Quarkus
APP
Redhat
wszystkie wersje
Red Hat Decision Manager
APP
Redhat
7.0
Red Hat Enterprise Linux
OS
Redhat
7.08.09.0
Red Hat Fuse
APP
Redhat
1.0.0
Red Hat Integration Camel K
APP
Redhat
wszystkie wersje
Red Hat Integration Service Registry
APP
Redhat
wszystkie wersje
Red Hat Jboss Enterprise Application Platform
APP
Redhat
7.4
Red Hat Jboss Enterprise Application Platform Expansion Pack
APP
Redhat
wszystkie wersje
Red Hat Openshift Application Runtimes
APP
Redhat
wszystkie wersje
Red Hat OpenShift Container Platform
APP
Redhat
4.114.12
Red Hat Openshift Container Platform For Linuxone
APP
Redhat
4.104.9
Red Hat Openshift Container Platform For Power
APP
Redhat
4.104.9
Red Hat Openstack Platform
APP
Redhat
13.0
Red Hat Process Automation
APP
Redhat
7.0
Red Hat Single Sign On
APP
Redhat
7.6
Red Hat Undertow
APP
Redhat
< 2.2.242.3.0 – 2.3.5 (bez)