GitHub Advisoryadvisory · Maven

GHSA-3f57-w2rp-72fc Undertow Uncaught Exception vulnerability

MEDIUM Published 2022-05-17 Modified 2022-11-08 Official page ↗
Aliases
CVE-2016-7046
Ecosystem
Maven
Packages
io.undertow:undertow-core
Severity
Moderate
CVSS vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-248
Reviewed
2022-11-08

Affected packages

• Maven io.undertow:undertow-core: >= 1.4.0, < 1.4.3.Final → fixed in 1.4.3.Final • Maven io.undertow:undertow-core: < 1.3.25.Final → fixed in 1.3.25.Final

Description

A long URL proxy request lead to java.nio.BufferOverflowException in Undertow.

Related

Alias · CVE (1)

  • CVE-2016-7046 Red Hat JBoss Enterprise Application Platform (EAP) 7, when operating as a reverse-proxy with default buffer sizes, allows remote attackers… vulnerability

Weakness · CWE (1)

  • CWE-248 Uncaught Exception weakness

References