REDHAT-BUG-2275287: Medium severity Undertow Undertow vulnerability
There exists a security vulnerability in Undertow that can cause remote DoS attacks. When server uses method FormEncodedDataDefinition.doParse(StreamSourceChannel) to parse large form data encoding with application/x-www-form-urlencoded, the method will cause OutOfMemory. This vulnerability can be exploited by unauthorized users to cause remote denial-of-service (DoS) attack.
This happens because there is no size limit for this method hence a large request may jeopardize the environment leading to DoS.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2275287?
The severity of REDHAT-BUG-2275287 is critical due to its potential to cause remote Denial of Service (DoS) attacks.
How do I fix REDHAT-BUG-2275287?
To fix REDHAT-BUG-2275287, users should update to the latest version of Undertow that addresses this vulnerability.
What is the impact of REDHAT-BUG-2275287?
The impact of REDHAT-BUG-2275287 is an OutOfMemory error that may occur when parsing large form data, leading to service disruption.
Who is affected by REDHAT-BUG-2275287?
Anyone using Undertow for processing application/x-www-form-urlencoded data is potentially affected by REDHAT-BUG-2275287.
What type of attacks can REDHAT-BUG-2275287 enable?
REDHAT-BUG-2275287 can enable remote Denial of Service attacks by exhausting server memory.