7.5

CVE-2023-1108

Undertow: infinite loop in sslconduit during close

A flaw was found in undertow. This issue makes achieving a denial of service possible due to an unexpected handshake status updated in SslConduit, where the loop never terminates.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Redhat ≫ Build Of Quarkus Version -
Redhat ≫ Decision Manager Version 7.0
Redhat ≫ Fuse Version 1.0.0
Redhat ≫ Integration Camel K Version -
Redhat ≫ Jboss Enterprise Application Platform Version - SwEdition text-only
Redhat ≫ Openshift Application Runtimes Version - SwEdition text-only
Redhat ≫ Openstack Platform Version 13.0
Redhat ≫ Process Automation Version 7.0
Redhat ≫ Single Sign-on Version - SwEdition text-only
Redhat ≫ Undertow Version < 2.2.24
Redhat ≫ Undertow Version >= 2.3.0 < 2.3.5
Redhat ≫ Openshift Container Platform Version 4.11
   Redhat ≫ Enterprise Linux Version 8.0
Redhat ≫ Openshift Container Platform Version 4.12
   Redhat ≫ Enterprise Linux Version 8.0
Redhat ≫ Openshift Container Platform For Power Version 4.10
   Redhat ≫ Enterprise Linux Version 8.0
Redhat ≫ Jboss Enterprise Application Platform Version 7.4
   Redhat ≫ Enterprise Linux Version 7.0
   Redhat ≫ Enterprise Linux Version 8.0
   Redhat ≫ Enterprise Linux Version 9.0
Redhat ≫ Single Sign-on Version 7.6
   Redhat ≫ Enterprise Linux Version 7.0
   Redhat ≫ Enterprise Linux Version 8.0
   Redhat ≫ Enterprise Linux Version 9.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.77% 0.752
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
RedHat 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')

The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

https://access.redhat.com/errata/RHSA-2023:1184
Vendor Advisory
https://access.redhat.com/errata/RHSA-2023:1185
Vendor Advisory
https://access.redhat.com/errata/RHSA-2023:1512
Vendor Advisory
https://access.redhat.com/errata/RHSA-2023:1513
Vendor Advisory
https://access.redhat.com/errata/RHSA-2023:1514
Vendor Advisory
https://access.redhat.com/errata/RHSA-2023:1516
Vendor Advisory
https://access.redhat.com/errata/RHSA-2023:2135
https://access.redhat.com/errata/RHSA-2023:3883
Vendor Advisory
https://access.redhat.com/errata/RHSA-2023:3884
Vendor Advisory
https://access.redhat.com/errata/RHSA-2023:3885
Vendor Advisory
https://access.redhat.com/errata/RHSA-2023:3888
Vendor Advisory
https://access.redhat.com/errata/RHSA-2023:3892
Vendor Advisory
https://access.redhat.com/errata/RHSA-2023:3954
Vendor Advisory
https://access.redhat.com/errata/RHSA-2023:4612
Vendor Advisory
https://access.redhat.com/security/cve/CVE-2023-1108
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2174246
Issue Tracking
https://github.com/advisories/GHSA-m4mm-pg93-fv78
https://security.netapp.com/advisory/ntap-20231020-0002/
Third Party Advisory