CVE-2023-1973

2024-04-0414:28:03

redhat.com

access.redhat.com

cve-2023-1973

undertow

formauthenticationmechanism

denial of service

outofmemory error

crafted requests

server's memory

6.7 Medium

AI Score

Confidence

High

0 Low

EPSS

Percentile

0.0%

JSON

A flaw was found in Undertow package. Using the FormAuthenticationMechanism, a malicious user could trigger a Denial of Service by sending crafted requests, leading the server to an OutofMemory error, exhausting the server’s memory.

References

bugzilla.redhat.com/show_bug.cgi?id=2185662

nvd.nist.gov/vuln/detail/CVE-2023-1973

www.cve.org/CVERecord?id=CVE-2023-1973