Undertow (Unknown) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2018-07-27. Vendor: Unknown.

CVEs of Undertow

• CVE-2017-2670 - CVSS 7.5 (high), 2018-07-27: It was found in Undertow before 1.3.28 that with non-clean TCP close, the Websocket server gets into infinite loop on every IO thread, effectively causing DoS.
• CVE-2017-2666 - CVSS 6.5 (medium), 2018-07-27: It was discovered in Undertow that the code that parsed the HTTP request line permitted invalid characters. This could be exploited, in conjunction with a…
• CVE-2018-1067 - CVSS 6.1 (medium), 2018-05-21: In Undertow before versions 7.1.2.CR1, 7.1.2.GA it was found that the fix for CVE-2016-4993 was incomplete and Undertow web server is vulnerable to the…