CVEvulnerability
CVE-2020-14326
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2021-06-02
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-400
Description
A vulnerability was found in RESTEasy, where RootNode incorrectly caches routes. This issue results in hash flooding, leading to slower requests with higher CPU time spent searching and adding the entry. This flaw allows an attacker to cause a denial of service.
Affected configurations
• redhat integration camel k
• redhat resteasy (>= 4.2.0 < 4.5.6)
• netapp oncommand insight
Related
Weakness · CWE (1)
- CWE-400 Uncontrolled Resource Consumption weakness
References
- https://bugzilla.redhat.com/show_bug.cgi?id=1855826 Issue Tracking, Vendor Advisory
- https://security.netapp.com/advisory/ntap-20210713-0001/ Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1855826 Issue Tracking, Vendor Advisory
- https://security.netapp.com/advisory/ntap-20210713-0001/ Third Party Advisory