A flaw was found in Undertow. Denial of service can be achieved as Undertow server waits for the LAST_CHUNK forever for EJB invocations.
References
| Link | Resource |
|---|---|
| https://bugzilla.redhat.com/show_bug.cgi?id=2117506 | Issue Tracking Vendor Advisory |
| https://security.netapp.com/advisory/ntap-20221014-0006/ | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
07 Nov 2022, 19:12
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:* cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:* cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:linux:*:* cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:cloud_secure_agent:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:* |
|
| References | (CONFIRM) https://security.netapp.com/advisory/ntap-20221014-0006/ - Third Party Advisory | |
| First Time |
Netapp oncommand Workflow Automation
Netapp oncommand Insight Netapp active Iq Unified Manager Netapp Netapp cloud Secure Agent |
14 Oct 2022, 13:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
07 Sep 2022, 19:37
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:redhat:undertow:2.3.0:alpha1:*:*:*:*:*:* cpe:2.3:a:redhat:undertow:2.3.0:alpha2:*:*:*:*:*:* cpe:2.3:a:redhat:integration_camel_k:-:*:*:*:*:*:*:* cpe:2.3:a:redhat:single_sign-on:7.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.0.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:jboss_fuse:7.0.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:undertow:*:*:*:*:*:*:*:* |
|
| References | (MISC) https://bugzilla.redhat.com/show_bug.cgi?id=2117506 - Issue Tracking, Vendor Advisory | |
| First Time |
Redhat single Sign-on
Redhat undertow Redhat integration Camel K Redhat Redhat jboss Enterprise Application Platform Redhat jboss Fuse |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.9 |
| CWE | NVD-CWE-noinfo |
01 Sep 2022, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-09-01 21:15
Updated : 2023-12-10 14:35
NVD link : CVE-2022-2764
Mitre link : CVE-2022-2764
CVE.ORG link : CVE-2022-2764
JSON object : View
Products Affected
redhat
- jboss_fuse
- jboss_enterprise_application_platform
- undertow
- integration_camel_k
- single_sign-on
netapp
- oncommand_insight
- active_iq_unified_manager
- oncommand_workflow_automation
- cloud_secure_agent
CWE