GitHub Advisoryadvisory · Maven

GHSA-qx3p-9mmp-4v8h Wildfly has a memory leak vulnerability

MEDIUM Published 2022-05-24 Modified 2023-08-23 Official page ↗
Aliases
CVE-2020-27822
Ecosystem
Maven
Packages
org.wildfly:wildfly-parent
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-401
Reviewed
2023-07-13

Affected packages

• Maven org.wildfly:wildfly-parent: >= 19.0.0.Final, < 21.0.2.Final → fixed in 21.0.2.Final • Maven org.wildfly:wildfly-parent: >= 22.0.0.Alpha1, < 22.0.0.Beta1 → fixed in 22.0.0.Beta1

Description

A flaw was found in Wildfly affecting versions 19.0.0.Final, 19.1.0.Final, 20.0.0.Final, 20.0.1.Final, and 21.0.0.Final. When an application uses the OpenTracing API's java-interceptors, there is a possibility of a memory leak. This flaw allows an attacker to impact the availability of the server. The highest threat from this vulnerability is to system availability.

Related

Alias · CVE (1)

  • CVE-2020-27822 A flaw was found in Wildfly affecting versions 19.0.0.Final, 19.1.0.Final, 20.0.0.Final, 20.0.1.Final, and 21.0.0.Final. vulnerability

Weakness · CWE (1)

  • CWE-401 Missing Release of Memory after Effective Lifetime weakness

References