Lucene search

K
cvelistRedhatCVELIST:CVE-2022-2764
HistorySep 01, 2022 - 12:00 a.m.

CVE-2022-2764

2022-09-0100:00:00
CWE-400
redhat
www.cve.org
5
undertow
denial of service
last_chunk
ejb invocations

AI Score

5.6

Confidence

High

EPSS

0.001

Percentile

29.8%

A flaw was found in Undertow. Denial of service can be achieved as Undertow server waits for the LAST_CHUNK forever for EJB invocations.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "undertow",
    "versions": [
      {
        "version": "undertow 2.x",
        "status": "affected"
      }
    ]
  }
]

AI Score

5.6

Confidence

High

EPSS

0.001

Percentile

29.8%