CVE-2020-10705

A flaw was discovered in Undertow in versions before Undertow 2.1.1.Final where certain requests to the "Expect: 100-continue" header may cause an out of memory error. This flaw may potentially lead to a denial of service.

Score

CVSS 3.1 7.5 High

Status

Modified - secalert@redhat.com

Published

2020-06-10

Last modified

2024-08-04

Weaknesses

CWE-400, CWE-770

Affected products

• Oncommand Insight (Netapp)
• Jboss Enterprise Application Platform (Redhat)
• Openshift Application Runtimes (Redhat)
• Undertow (Redhat)

References

• https://bugzilla.redhat.com/show_bug.cgi?id=1803241
• https://security.netapp.com/advisory/ntap-20220210-0014/