Lucene search

RedhatCVELIST:CVE-2020-27822

HistoryDec 08, 2020 - 12:07 a.m.

CVE-2020-27822

2020-12-0800:07:18

CWE-401

redhat

www.cve.org

wildfly

memory leak

opentracing api

java-interceptors

server availability

AI Score

5.6

Confidence

High

EPSS

0.001

Percentile

36.9%

JSON

A flaw was found in Wildfly affecting versions 19.0.0.Final, 19.1.0.Final, 20.0.0.Final, 20.0.1.Final, and 21.0.0.Final. When an application uses the OpenTracing API’s java-interceptors, there is a possibility of a memory leak. This flaw allows an attacker to impact the availability of the server. The highest threat from this vulnerability is to system availability.

CNA Affected

[
  {
    "product": "wildfly",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "19.0.0.Final, 19.1.0.Final, 20.0.0.Final, 20.0.1.Final, 21.0.0.Final"
      }
    ]
  }
]

References

bugzilla.redhat.com/show_bug.cgi?id=1904060