CVE-2019-19343

A flaw was found in Undertow when using Remoting as shipped in Red Hat Jboss EAP before version 7.2.4. A memory leak in HttpOpenListener due to holding remote connections indefinitely may lead to denial of service. Versions before undertow 2.0.25.SP1 and jboss-remoting 5.0.14.SP1 are believed to be vulnerable.
References
Link Resource
https://issues.redhat.com/browse/JBEAP-16695 Permissions Required Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1780445 Issue Tracking Vendor Advisory
https://security.netapp.com/advisory/ntap-20220211-0002/ Third Party Advisory
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

OR cpe:2.3:a:redhat:jboss-remoting:*:*:*:*:*:*:*:*
cpe:2.3:a:redhat:jboss-remoting:5.0.14:-:*:*:*:*:*:*
cpe:2.3:a:redhat:jboss_enterprise_application_platform:*:*:*:*:*:*:*:*
cpe:2.3:a:redhat:undertow:*:*:*:*:*:*:*:*
cpe:2.3:a:redhat:undertow:2.0.25:-:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:linux:*:*
cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*
cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vsphere:*:*

Information

Published : 2021-03-23 14:15

Updated : 2022-05-03 06:05


NVD link : CVE-2019-19343

Mitre link : CVE-2019-19343


JSON object : View

CWE
CWE-404

Improper Resource Shutdown or Release

Advertisement

dedicated server usa

Products Affected

redhat

  • undertow
  • jboss-remoting
  • jboss_enterprise_application_platform

netapp

  • active_iq_unified_manager