CVE-2022-1319

🗓️ 31 Aug 2022 00:00:00Reported by redhatType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 205 Views

Flaw in Undertow allows improper sending of response packets, leading to connection reuse failure

Reporter	Title	Published	Views	Family All 54
ATTACKERKB	CVE-2022-1319	31 Aug 202216:15	–	attackerkb
Circl	CVE-2022-1319	31 Aug 202220:37	–	circl
CNNVD	Red Hat Undertow 安全漏洞	11 Apr 202200:00	–	cnnvd
Cvelist	CVE-2022-1319	31 Aug 202200:00	–	cvelist
Debian CVE	CVE-2022-1319	31 Aug 202200:00	–	debiancve
EUVD	EUVD-2022-24647	3 Oct 202520:07	–	euvd
NVD	CVE-2022-1319	31 Aug 202216:15	–	nvd
OpenVAS	osTicket < 1.16.6, 1.17.x < 1.17.3 Multiple XSS Vulnerabilities	14 Mar 202300:00	–	openvas
Oracle	Oracle Critical Patch Update Advisory - January 2023	17 Jan 202300:00	–	oracle
OSV	CVE-2022-1319	31 Aug 202216:15	–	osv

NVD

Vulners

Node

redhat openshift_application_runtimesMatch-

redhat single_sign-onMatch7.0

redhat undertowRange<2.2.17

redhat undertowMatch2.2.17-

redhat undertowMatch2.2.17sp1

redhat undertowMatch2.2.17sp2

redhat undertowMatch2.2.19-

redhat undertowMatch2.2.19sp1

redhat undertowMatch2.3.0alpha1

Node

netapp active_iq_unified_managerMatch-linux

netapp active_iq_unified_managerMatch-vmware_vsphere

netapp active_iq_unified_managerMatch-windows

netapp cloud_secure_agentMatch-

netapp oncommand_insightMatch-

netapp oncommand_workflow_automationMatch-

[
  {
    "vendor": "n/a",
    "product": "undertow",
    "versions": [
      {
        "version": "Fixed in 2.3.0.Final, 2.2.18.Final, 2.2.17.SP3, 2.2.17.SP4, 2.3.0.Alpha2",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/undertow-io/undertow/commit/7c5b3ab885b5638fd3f1e8a935d5063d68aa2df3
access	www.access.redhat.com/security/cve/CVE-2022-1319
security	www.security.netapp.com/advisory/ntap-20221014-0006/
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
issues	www.issues.redhat.com/browse/UNDERTOW-2060
github	www.github.com/undertow-io/undertow/commit/1443a1a2bbb8e32e56788109d8285db250d55c8b

21 Nov 2024 06:40Current

7.3High risk

Vulners AI Score7.3

CVSS 3.17.5

EPSS0.00606

CWE-252

undertow eap 7 ajp cve-2022-1319 security flaw connection reuse