CVE-2017-2670
EUVD-2018-049127.07.2018, 15:29
It was found in Undertow before 1.3.28 that with non-clean TCP close, the Websocket server gets into infinite loop on every IO thread, effectively causing DoS.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| redhat | undertow | 𝑥 < 1.3.28 |
| debian | debian_linux | 9.0 |
| redhat | jboss_enterprise_application_platform | 6.0.0 |
| redhat | jboss_enterprise_application_platform | 7.0.0 |
| redhat | jboss_enterprise_application_platform | 7.1.0 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| undertow |
|
Common Weakness Enumeration
References