7.5
CVE-2026-15561
- EPSS 0.35%
- Veröffentlicht 11.08.2026 09:17:12
- Zuletzt bearbeitet 24.08.2026 12:16:48
- CVE-Watchlists
- Unerledigt
Undertow-core: oom via missing limits in chunked trailer in eap's undertow
A flaw was found in EAP's undertow http/1.1 chunked-transfer decoder. missing limits on size and count would allow an attacker to use an unauthenticated connection to drive the JVM to an OutOfMemory error, stopping all deployments on the listener, and achieving Denial of Service.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerRed Hat
≫
Produkt
Red Hat JBoss Enterprise Application Platform 7.4.25
Default Statusunaffected
HerstellerRed Hat
≫
Produkt
Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
Default Statusaffected
Version
0:2.16.0-22.redhat_00057.1.el7eap
Version <
*
Status
unaffected
HerstellerRed Hat
≫
Produkt
Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
Default Statusaffected
Version
0:2.3.14-11.SP11_redhat_00001.1.el7eap
Version <
*
Status
unaffected
HerstellerRed Hat
≫
Produkt
Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
Default Statusaffected
Version
0:1.5.26-2.Final_redhat_00001.1.el7eap
Version <
*
Status
unaffected
HerstellerRed Hat
≫
Produkt
Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
Default Statusaffected
Version
0:2.18.8-1.redhat_00003.1.el7eap
Version <
*
Status
unaffected
HerstellerRed Hat
≫
Produkt
Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
Default Statusaffected
Version
0:2.18.8-1.redhat_00003.1.el7eap
Version <
*
Status
unaffected
HerstellerRed Hat
≫
Produkt
Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
Default Statusaffected
Version
0:2.18.8-1.redhat_00003.1.el7eap
Version <
*
Status
unaffected
HerstellerRed Hat
≫
Produkt
Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
Default Statusaffected
Version
0:2.18.8-1.redhat_00003.1.el7eap
Version <
*
Status
unaffected
HerstellerRed Hat
≫
Produkt
Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
Default Statusaffected
Version
0:2.18.8-1.redhat_00003.1.el7eap
Version <
*
Status
unaffected
HerstellerRed Hat
≫
Produkt
Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
Default Statusaffected
Version
0:2.18.8-1.redhat_00003.1.el7eap
Version <
*
Status
unaffected
HerstellerRed Hat
≫
Produkt
Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
Default Statusaffected
Version
0:5.0.31-3.SP2_redhat_00001.1.el7eap
Version <
*
Status
unaffected
HerstellerRed Hat
≫
Produkt
Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
Default Statusaffected
Version
0:1.10.0-46.Final_redhat_00044.1.el7eap
Version <
*
Status
unaffected
HerstellerRed Hat
≫
Produkt
Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
Default Statusaffected
Version
0:4.1.135-1.Final_redhat_00001.1.el7eap
Version <
*
Status
unaffected
HerstellerRed Hat
≫
Produkt
Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
Default Statusaffected
Version
0:4.1.135-1.Final_redhat_00001.1.el7eap
Version <
*
Status
unaffected
HerstellerRed Hat
≫
Produkt
Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
Default Statusaffected
Version
0:2.5.5-30.SP12_redhat_00020.1.el7eap
Version <
*
Status
unaffected
HerstellerRed Hat
≫
Produkt
Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
Default Statusaffected
Version
0:2.5.5-24.SP12_redhat_00016.1.el7eap
Version <
*
Status
unaffected
HerstellerRed Hat
≫
Produkt
Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
Default Statusaffected
Version
0:2.2.40-2.SP3_redhat_00001.1.el7eap
Version <
*
Status
unaffected
HerstellerRed Hat
≫
Produkt
Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
Default Statusaffected
Version
0:7.4.25-2.GA_redhat_00001.1.el7eap
Version <
*
Status
unaffected
HerstellerRed Hat
≫
Produkt
Red Hat JBoss Enterprise Application Platform 7
Default Statusaffected
HerstellerRed Hat
≫
Produkt
Red Hat JBoss Enterprise Application Platform 8
Default Statusaffected
HerstellerRed Hat
≫
Produkt
Red Hat JBoss Enterprise Application Platform Expansion Pack
Default Statusunaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.35% | 0.279 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| RedHat | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
|
CWE-770 Allocation of Resources Without Limits or Throttling
The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.
https://access.redhat.com/security/cve/CVE-2026-15561
https://bugzilla.redhat.com/show_bug.cgi?id=2483133
https://access.redhat.com/errata/RHSA-2026:53644
https://access.redhat.com/errata/RHSA-2026:53806