CLSA-2026-1787137111 TuxCare security update for io.undertow (6 CVEs)

🗓️ 19 Aug 2026 10:58:31Reported by GoogleType

osv

osv🔗 osv.dev👁 2 Views

TuxCare rebuilt io.undertow packages fixing 6 CVEs in 2.2.24.Final-tuxcare.1.

Reporter	Title	Published	Views	Family All 219
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by a denial of service vulnerability in Undertow (CVE-2024-7885)	28 Jan 202522:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by a denial of service vulnerability in Undertow (CVE-2024-6162)	10 Sep 202418:44	–	ibm
ATTACKERKB	CVE-2023-4639	17 Nov 202411:15	–	attackerkb
ATTACKERKB	CVE-2023-1973	7 Nov 202410:15	–	attackerkb
BDU FSTEC	The vulnerability of the Undertow web server, related to deficiencies in the processing of incoming HTTP requests, allows attackers to compromise the confidentiality and integrity of protected information.	15 Feb 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Undertow software package from Red Hat JBoss Enterprise Application Platform allows a hacker to trigger a service failure.	19 Apr 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the parseProxyProtocolV1() function in the ProxyProtocolReadListener class of the Undertow web server allows a hacker to gain unauthorized access to protected information.	7 Oct 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the AjpRequestParser class in the ajp-listener component of the Undertow web server allows a attacker to trigger a service failure.	21 Oct 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Undertow web server, related to uncontrolled recursion, allows attackers who operate remotely to cause service interruptions.	9 Jan 202600:00	–	bdu_fstec
Circl	CVE-2023-4639	9 Feb 202404:11	–	circl

19 Aug 2026 12:45Current

5.4Medium risk

Vulners AI Score5.4

CVSS 3.17.5

EPSS0.02716

SSVC

io.undertow security-update CVE TuxCare Java