Lucene search
+L

5 matches found

RedHat Linux
RedHat Linux
added 2026/08/11 4:41 p.m.4 views

undertow: undertow-websockets: Undertow: Pre-Auth DoS on websocket endpoint with @ServerEndpoint class with any @OnMessage method

A flaw was found in Undertow. A remote attacker can cause Out of Memory on websockets endpoint without authentication on any @ServerEndpoint class that has any @OnMessage method. This allows an attacker to cause Denial of Service attack without authentication and using only a standard WebSocket...

7.5CVSS0.0051EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/08/11 4:40 p.m.6 views

undertow: undertow-websockets: Undertow: Pre-Auth DoS on websocket endpoint with @ServerEndpoint class with any @OnMessage method

A flaw was found in Undertow. A remote attacker can cause Out of Memory on websockets endpoint without authentication on any @ServerEndpoint class that has any @OnMessage method. This allows an attacker to cause Denial of Service attack without authentication and using only a standard WebSocket...

7.5CVSS0.0051EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/08/11 4:39 p.m.5 views

undertow: undertow-websockets: Undertow: Pre-Auth DoS on websocket endpoint with @ServerEndpoint class with any @OnMessage method

A flaw was found in Undertow. A remote attacker can cause Out of Memory on websockets endpoint without authentication on any @ServerEndpoint class that has any @OnMessage method. This allows an attacker to cause Denial of Service attack without authentication and using only a standard WebSocket...

7.5CVSS0.0051EPSS
SaveExploits0References5
OSV
OSV
added 2026/08/11 9:17 a.m.9 views

DEBIAN-CVE-2026-15565

A flaw was found in Undertow. A remote attacker can cause Out of Memory on websockets endpoint without authentication on any @ServerEndpoint class that has any @OnMessage method. This allows an attacker to cause Denial of Service attack without authentication and using only a standard WebSocket...

7.5CVSS5.5AI score0.0051EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/11 8:49 a.m.51 views

CVE-2026-15565 Undertow: undertow-websockets: undertow: pre-auth dos on websocket endpoint with @serverendpoint class with any @onmessage method

A flaw was found in Undertow. A remote attacker can cause Out of Memory on websockets endpoint without authentication on any @ServerEndpoint class that has any @OnMessage method. This allows an attacker to cause Denial of Service attack without authentication and using only a standard WebSocket...

7.5CVSS0.0051EPSS
SaveExploits0References6
Rows per page
Query Builder