CVE-2020-25689

Published: Nov 2, 2020Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

A memory leak flaw was found in WildFly in all versions up to 21.0.0.Final, where host-controller tries to reconnect in a loop, generating new connections which are not properly closed while not able to connect to domain-controller. This flaw allows an attacker to cause an Out of memory (OOM) issue, leading to a denial of service. The highest threat from this vulnerability is to system availability.

Affected (12)

Products: Redhat: Wildfly, Fuse, Jboss Data Grid, Jboss Enterprise Application Platform, Jboss Fuse, Openshift Application Runtimes, Single Sign On · Netapp: Active Iq Unified Manager, Oncommand Insight, Service Level Manager

7 products

Jboss Enterprise Application Platform

Jboss Fuse

Openshift Application Runtimes

Single Sign On

Netapp

3 products

Active Iq Unified Manager

Oncommand Insight

Service Level Manager

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Redhat Wildfly	Up to 21.0.0

Configuration B

6 vulnerable

Vulnerable Software	Affected Versions
Redhat Fuse	Version 6.0.0
Redhat Jboss Data Grid	Version 7.0.0
Redhat Jboss Enterprise Application Platform	Version 7.0.0
Redhat Jboss Fuse	Version 7.0.0
Redhat Openshift Application Runtimes	All versions
Redhat Single Sign On	Version 7.0

Configuration C

5 vulnerable

Vulnerable Software	Affected Versions
Netapp Active Iq Unified Manager	All versions
Netapp Active Iq Unified Manager	All versions
Netapp Active Iq Unified Manager	All versions
Netapp Oncommand Insight	All versions
Netapp Service Level Manager	All versions