br.eti.clairton:ds-test (>=1.0.1, <=1.1.0), cn.dreampie:resty-server (1.3.0.release) +183 more potentially affected by CVE-2018-1114 via io.undertow:undertow-core (>=2.0.0.alpha1, <=2.0.4.final)

io.undertow:undertow-core MAVEN version =2.0.0.alpha1, =1.0.1, =2.0.0-rc1, =2.3.0, =2.3.0, =1.2.3, =1.2.4 - com.sksamuel.http4k:http4k-undertow 0.91.0 - com.zarbosoft:async-aws 1.0.0 - io.bootique.kotlin:bootique-kotlin-undertow 0.25 - io.bootique.undertow:bootique-undertow 0.25 and more Source...

br.eti.clairton:ds-test (0.4.0), br.jus.stf.digital:core (>=2.0.0, <=2.3.1) +1360 more potentially affected by CVE-2018-1114 via io.undertow:undertow-core (>=1.0.0.alpha1, <=1.4.24.final)

io.undertow:undertow-core MAVEN version =1.0.0.alpha1, =2.0.0, =1.0, =1.0, =0.0.4, =0.2.7, =0.0.1, =0.0.1, =0.0.1, =0.1.0, =0.2.0, =0.7.0 and more Source cves: CVE-2018-1114 Source advisory: GHSA-GJJX-GQM4-WCGM...

br.eti.clairton:ds-test (0.4.0), br.jus.stf.digital:core (>=2.0.0, <=2.3.1) +1360 more potentially affected by CVE-2018-1114 via io.undertow:undertow-core (>=1.0.0.alpha1, <=1.4.24.final)

io.undertow:undertow-core MAVEN version =1.0.0.alpha1, =2.0.0, =1.0, =1.0, =0.0.4, =0.2.7, =0.0.1, =0.0.1, =0.0.1, =0.1.0, =0.2.0, =0.7.0 and more Source cves: CVE-2018-1114 Source advisory: OSV:GHSA-GJJX-GQM4-WCGM...

br.eti.clairton:ds-test (>=1.0.1, <=1.1.0), cn.dreampie:resty-server (1.3.0.release) +183 more potentially affected by CVE-2018-1114 via io.undertow:undertow-core (>=2.0.0.alpha1, <=2.0.4.final)

io.undertow:undertow-core MAVEN version =2.0.0.alpha1, =1.0.1, =2.0.0-rc1, =2.3.0, =2.3.0, =1.2.3, =1.2.4 - com.sksamuel.http4k:http4k-undertow 0.91.0 - com.zarbosoft:async-aws 1.0.0 - io.bootique.kotlin:bootique-kotlin-undertow 0.25 - io.bootique.undertow:bootique-undertow 0.25 and more Source...

CVE-2018-1114

It was found that URLResource.getLastModified in Undertow closes the file descriptors only when they are finalized which can cause file descriptors to exhaust. This leads to a file handler leak...

CVE-2018-1114

CVE-2018-1114 corresponds to an Undertow issue where URLResource.getLastModified() closes file descriptors only when finalized, enabling a file descriptor leak and potential exhaustion. The vulnerability is evidenced in multiple sources (GHSA- GJJX-GQM4-WCGM, Red Hat advisories) describing an unc...

br.eti.clairton:ds-test (0.4.0), br.jus.stf.digital:core (>=2.0.0, <=2.3.1) +1360 more potentially affected by CVE-2018-1114 via io.undertow:undertow-core (>=1.0.0.alpha1, <=1.4.24.final)

io.undertow:undertow-core MAVEN version =1.0.0.alpha1, =2.0.0, =1.0, =1.0, =0.0.4, =0.2.7, =0.0.1, =0.0.1, =0.0.1, =0.1.0, =0.2.0, =0.7.0 and more Source cves: CVE-2018-1114 Source advisory: MEND:CVE-2018-1114...

Important: Red Hat Security Advisory: Fuse 7.1 security update

An update is now available for Red Hat Fuse. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the...

RHEL 7 : rhvm-appliance (RHSA-2018:2643)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2018:2643 advisory. The RHV-M Virtual Appliance automates the process of installing and configuring the Red Hat Virtualization Manager. The appliance is availab...

RHEL 7 : Red Hat JBoss Enterprise Application Platform (RHSA-2018:2089)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:2089 advisory. Red Hat JBoss Enterprise Application Platform is a platform for Java applications based on the JBoss Application Server. This release of Red...

RHEL 6 : Red Hat JBoss Enterprise Application Platform (RHSA-2018:2090)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:2090 advisory. Red Hat JBoss Enterprise Application Platform is a platform for Java applications based on the JBoss Application Server. This release of Red...