Undertow (Red Hat) - vulnerabilities (CVEs)

7 CVEs, 0 in the last 30 days, 5 known versions, newest CVE from 2020-05-26. Vendor: Red Hat.

CVEs of Undertow

• CVE-2020-10719 - CVSS 6.5 (medium), 2020-05-26: A flaw was found in Undertow in versions before 2.1.1.Final, regarding the processing of invalid HTTP requests with large chunk sizes. This flaw allows an…
• CVE-2020-1757 - CVSS 8.1 (high), 2020-04-21: A flaw was found in all undertow-2.x.x SP1 versions prior to undertow-2.0.30.SP1, all undertow-1.x.x and undertow-2.x.x versions prior to…
• CVE-2019-14888 - CVSS 7.5 (high), 2020-01-23: A vulnerability was found in the Undertow HTTP server in versions before 2.0.28.SP1 when listening on HTTPS. An attacker can target the HTTPS port to carry…
• CVE-2019-3888 - CVSS 9.8 (critical), 2019-06-12: A vulnerability was found in Undertow web server before 2.0.21. An information exposure of plain text credentials through log files because…
• CVE-2018-14642 - CVSS 5.3 (medium), 2018-09-18: An information leak vulnerability was found in Undertow. If all headers are not written out in the first write() call then the code that handles flushing the…
• CVE-2018-1114 - CVSS 6.5 (medium), 2018-09-11: It was found that URLResource.getLastModified() in Undertow closes the file descriptors only when they are finalized which can cause file descriptors to…
• CVE-2017-12165 - CVSS 7.5 (high), 2018-07-27: It was discovered that Undertow before 1.4.17, 1.3.31 and 2.0.0 processes http request headers with unusual whitespaces which can cause possible http request…