1 matches found
undertow-core: Undertow: Denial of Service via WebSocket permessage-deflate processing
A flaw was found in Undertow. A remote attacker could exploit this vulnerability by sending specially crafted WebSocket messages with permessage-deflate negotiated. This could lead to excessive memory consumption due to the PerMessageDeflateFunction.largerBuffer method using exponential doubling,...
7.5CVSS0.00404EPSS
SaveExploits0References4
20