CVE-2022-2764

A flaw was found in Undertow. Denial of service can be achieved as Undertow server waits for the LAST_CHUNK forever for EJB invocations.

Score

CVSS 3.1 4.9 Medium

Status

Modified - secalert@redhat.com

Published

2022-09-01

Last modified

2024-08-03

Weaknesses

CWE-400

Affected products

• Active Iq Unified Manager (Netapp)
• Cloud Secure Agent (Netapp)
• Oncommand Insight (Netapp)
• Oncommand Workflow Automation (Netapp)
• Integration Camel K (Redhat)
• Jboss Enterprise Application Platform (Redhat)
• Jboss Fuse (Redhat)
• Single Sign-on (Redhat)
• Undertow (Redhat)

References

• https://bugzilla.redhat.com/show_bug.cgi?id=2117506
• https://security.netapp.com/advisory/ntap-20221014-0006/