CVE-2023-1108

Published: Sep 14, 2023Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

A flaw was found in undertow. This issue makes achieving a denial of service possible due to an unexpected handshake status updated in SslConduit, where the loop never terminates.

Affected (22)

Products: Redhat: Build Of Quarkus, Decision Manager, Fuse, Integration Camel K, Integration Service Registry, Jboss Enterprise Application Platform, Jboss Enterprise Application Platform Expansion Pack, Openshift Application Runtimes, Openstack Platform, Process Automation, Single Sign On, Undertow, Openshift Container Platform, Openshift Container Platform For Linuxone, Openshift Container Platform For Power · Netapp: Oncommand Workflow Automation

15 products

Build Of Quarkus

Decision Manager

Integration Camel K

Integration Service Registry

Jboss Enterprise Application Platform

Jboss Enterprise Application Platform Expansion Pack

Openshift Application Runtimes

Openstack Platform

Process Automation

Openshift Container Platform

Openshift Container Platform For Linuxone

Openshift Container Platform For Power

1 product

Oncommand Workflow Automation

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Redhat Build Of Quarkus	All versions
Redhat Decision Manager	Version 7.0
Redhat Fuse	Version 1.0.0
Redhat Integration Camel K	All versions
Redhat Integration Service Registry	All versions
Redhat Jboss Enterprise Application Platform	All versions
Redhat Jboss Enterprise Application Platform Expansion Pack	All versions
Redhat Openshift Application Runtimes	All versions
Redhat Openstack Platform	Version 13.0
Redhat Process Automation	Version 7.0
Redhat Single Sign On	All versions
Redhat Undertow	Before 2.2.24
Redhat Undertow	From 2.3.0 to 2.3.5

Configuration B

6 vulnerable

Vulnerable Software	Affected Versions
Redhat Openshift Container Platform	Version 4.11
Redhat Openshift Container Platform	Version 4.12
Redhat Openshift Container Platform For Linuxone	Version 4.10
Redhat Openshift Container Platform For Linuxone	Version 4.9
Redhat Openshift Container Platform For Power	Version 4.10
Redhat Openshift Container Platform For Power	Version 4.9

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Redhat Jboss Enterprise Application Platform	Version 7.4

Configuration D

1 vulnerable · 3 platform

Vulnerable Software	Affected Versions
Redhat Single Sign On	Version 7.6

Running on/with	Platform Versions
Redhat Enterprise Linux	Version 7.0
Redhat Enterprise Linux	Version 8.0
Redhat Enterprise Linux	Version 9.0

Configuration E

1 vulnerable

Vulnerable Software	Affected Versions
Netapp Oncommand Workflow Automation	All versions

Related CWEs

Loop with Unreachable Exit Condition ('Infinite Loop')

The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

References (36)

https://access.redhat.com/errata/RHSA-2023:1184

Source: secalert@redhat.com

Vendor Advisory

https://access.redhat.com/errata/RHSA-2023:1185

Source: secalert@redhat.com

Vendor Advisory

https://access.redhat.com/errata/RHSA-2023:1512

Source: secalert@redhat.com

Vendor Advisory

https://access.redhat.com/errata/RHSA-2023:1513

Source: secalert@redhat.com

Vendor Advisory

https://access.redhat.com/errata/RHSA-2023:1514

Source: secalert@redhat.com

Vendor Advisory

https://access.redhat.com/errata/RHSA-2023:1516

Source: secalert@redhat.com

Vendor Advisory

https://access.redhat.com/errata/RHSA-2023:2135

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2023:3883

Source: secalert@redhat.com

Vendor Advisory

https://access.redhat.com/errata/RHSA-2023:3884

Source: secalert@redhat.com

Vendor Advisory

https://access.redhat.com/errata/RHSA-2023:3885

Source: secalert@redhat.com

Vendor Advisory

https://access.redhat.com/errata/RHSA-2023:3888

Source: secalert@redhat.com

Vendor Advisory

https://access.redhat.com/errata/RHSA-2023:3892

Source: secalert@redhat.com

Vendor Advisory

https://access.redhat.com/errata/RHSA-2023:3954

Source: secalert@redhat.com

Vendor Advisory

https://access.redhat.com/errata/RHSA-2023:4612

Source: secalert@redhat.com

Vendor Advisory

https://access.redhat.com/security/cve/CVE-2023-1108

Source: secalert@redhat.com

Vendor Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=2174246

Source: secalert@redhat.com

Issue Tracking

https://github.com/advisories/GHSA-m4mm-pg93-fv78

Source: secalert@redhat.com

https://security.netapp.com/advisory/ntap-20231020-0002/

Source: secalert@redhat.com

Third Party Advisory

https://access.redhat.com/errata/RHSA-2023:1184

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://access.redhat.com/errata/RHSA-2023:1185

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://access.redhat.com/errata/RHSA-2023:1512

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://access.redhat.com/errata/RHSA-2023:1513

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://access.redhat.com/errata/RHSA-2023:1514

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://access.redhat.com/errata/RHSA-2023:1516

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://access.redhat.com/errata/RHSA-2023:2135

Source: af854a3a-2127-422b-91ae-364da2661108

https://access.redhat.com/errata/RHSA-2023:3883

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://access.redhat.com/errata/RHSA-2023:3884

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://access.redhat.com/errata/RHSA-2023:3885

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://access.redhat.com/errata/RHSA-2023:3888

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://access.redhat.com/errata/RHSA-2023:3892

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://access.redhat.com/errata/RHSA-2023:3954

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://access.redhat.com/errata/RHSA-2023:4612

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://access.redhat.com/security/cve/CVE-2023-1108

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=2174246

Source: af854a3a-2127-422b-91ae-364da2661108

Issue Tracking

https://github.com/advisories/GHSA-m4mm-pg93-fv78

Source: af854a3a-2127-422b-91ae-364da2661108

https://security.netapp.com/advisory/ntap-20231020-0002/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.