CVE-2023-1108
A flaw was found in undertow. This issue makes achieving a denial of service possible due to an unexpected handshake status updated in SslConduit, where the loop never terminates.
- Score
- CVSS 3.1 7.5 High
- Status
- Modified - secalert@redhat.com
- Published
- 2023-09-14
- Last modified
- 2024-08-02
- Weaknesses
- CWE-835
Affected products
- Oncommand Workflow Automation (Netapp)
- Build Of Quarkus (Redhat)
- Camel Quarkus (Redhat)
- Decision Manager (Redhat)
- Fuse (Redhat)
- Integration (Redhat)
- Integration Camel K (Redhat)
- Integration Service Registry (Redhat)
- Jboss Data Grid (Redhat)
- Jboss Enterprise Application Platform (Redhat)
- Jboss Enterprise Application Platform Expansion Pack (Redhat)
- Jboss Enterprise Bpms Platform (Redhat)
- Jboss Fuse (Redhat)
- Jbosseapxp (Redhat)
- Openshift Application Runtimes (Redhat)
- Openshift Container Platform (Redhat)
- Openshift Container Platform For Linuxone (Redhat)
- Openshift Container Platform For Power (Redhat)
- Openstack (Redhat)
- Openstack Platform (Redhat)
- Process Automation (Redhat)
- Quarkus (Redhat)
- Red Hat Single Sign On (Redhat)
- Rhosemc (Redhat)
- Service Registry (Redhat)
- Single Sign-on (Redhat)
- Undertow (Redhat)
References
- https://access.redhat.com/errata/RHSA-2023:1184
- https://access.redhat.com/errata/RHSA-2023:1185
- https://access.redhat.com/errata/RHSA-2023:1512
- https://access.redhat.com/errata/RHSA-2023:1513
- https://access.redhat.com/errata/RHSA-2023:1514
- https://access.redhat.com/errata/RHSA-2023:1516
- https://access.redhat.com/errata/RHSA-2023:2135
- https://access.redhat.com/errata/RHSA-2023:3883
- https://access.redhat.com/errata/RHSA-2023:3884
- https://access.redhat.com/errata/RHSA-2023:3885
- https://access.redhat.com/errata/RHSA-2023:3888
- https://access.redhat.com/errata/RHSA-2023:3892
- https://access.redhat.com/errata/RHSA-2023:3954
- https://access.redhat.com/errata/RHSA-2023:4612
- https://access.redhat.com/security/cve/CVE-2023-1108
- https://bugzilla.redhat.com/show_bug.cgi?id=2174246
- https://github.com/advisories/GHSA-m4mm-pg93-fv78
- https://security.netapp.com/advisory/ntap-20231020-0002/
