GitHub Advisoryadvisory · Maven

GHSA-37g7-8vjj-pjpj RESTEasy 4.5.5.Final in hash flooding

HIGH Published 2022-03-18 Modified 2022-07-19 Official page ↗
Aliases
CVE-2020-14326
Ecosystem
Maven
Packages
org.jboss.resteasy:resteasy-bom
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-400
Reviewed
2021-06-03

Affected packages

• Maven org.jboss.resteasy:resteasy-bom: < 4.5.6.Final → fixed in 4.5.6.Final

Description

A vulnerability was found in RESTEasy, where RootNode incorrectly caches routes. This issue results in hash flooding, leading to slower requests with higher CPU time spent searching and adding the entry. This flaw allows an attacker to cause a denial of service.

Related

Alias · CVE (1)

  • CVE-2020-14326 A vulnerability was found in RESTEasy, where RootNode incorrectly caches routes. vulnerability

Weakness · CWE (1)

  • CWE-400 Uncontrolled Resource Consumption weakness

References