← Back

CVE-2022-2764

nvd nist
Published: Sep 1, 2022Modified: Jun 17, 2026

JSON object

Loading...
4.9
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Exploitability: 1.2 / Impact: 3.6
Source: NVD

Description

A flaw was found in Undertow. Denial of service can be achieved as Undertow server waits for the LAST_CHUNK forever for EJB invocations.

Affected (13)

Redhat
5 products
Integration Camel K
Jboss Enterprise Application Platform
Jboss Fuse
Single Sign On
Undertow
Netapp
4 products
Active Iq Unified Manager
Cloud Secure Agent
Oncommand Insight
Oncommand Workflow Automation
Configuration A
7 vulnerable
Vulnerable SoftwareAffected Versions
Integration Camel K
All versions
Jboss Enterprise Application Platform
Version 7.0.0
Jboss Fuse
Version 7.0.0
Single Sign On
Version 7.0
Redhat
Undertow
From 2.0.0 to 2.2.19
Undertow
Version 2.3.0 alpha1
Undertow
Version 2.3.0 alpha2
Configuration B
6 vulnerable
Vulnerable SoftwareAffected Versions
Netapp
Active Iq Unified Manager
All versions
Active Iq Unified Manager
All versions
Active Iq Unified Manager
All versions
Cloud Secure Agent
All versions
Oncommand Insight
All versions
Oncommand Workflow Automation
All versions

Related CWEs

CWE-400
Uncontrolled Resource Consumption
The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

References (4)

Source: secalert@redhat.com
Issue TrackingVendor Advisory
Source: secalert@redhat.com
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.