CVE-2024-5971

A vulnerability was found in Undertow, where the chunked response hangs after the body was flushed. The response headers and body were sent but the client would continue waiting as Undertow does not send the expected 0\r\n termination of the chunked response. This results in uncontrolled resource...

CVE-2024-5971 Undertow: response write hangs in case of java 17 tlsv1.3 newsessionticket

A vulnerability was found in Undertow, where the chunked response hangs after the body was flushed. The response headers and body were sent but the client would continue waiting as Undertow does not send the expected 0\r\n termination of the chunked response. This results in uncontrolled resource...

CVE-2024-5971 Undertow: response write hangs in case of java 17 tlsv1.3 newsessionticket

A vulnerability was found in Undertow, where the chunked response hangs after the body was flushed. The response headers and body were sent but the client would continue waiting as Undertow does not send the expected 0\r\n termination of the chunked response. This results in uncontrolled resource...

CVE-2024-5971

Technical details of CVE-2024-5971 are not provided in the connected documents; monitor for updates.

CVE-2024-5971

A vulnerability was found in Undertow, where the chunked response hangs after the body was flushed. The response headers and body were sent but the client would continue waiting as Undertow does not send the expected 0\r\n termination of the chunked response. This results in uncontrolled resource...

CVE-2024-5971: Uncontrolled Recursion

A vulnerability was found in Undertow, where the chunked response hangs after the body was flushed. The response headers and body were sent but the client would continue waiting as Undertow does not send the expected 0\r\n termination of the chunked response. This results in uncontrolled resource...

OPENSUSE-SU-2024:13678-1 java-17-openj9-17.0.10.0-1.1 on GA media

These are all security issues fixed in the java-17-openj9-17.0.10.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13587-1 java-17-openjdk-17.0.10.0-1.1 on GA media

These are all security issues fixed in the java-17-openjdk-17.0.10.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12464-1 java-17-openj9-17.0.5.0-1.1 on GA media

These are all security issues fixed in the java-17-openj9-17.0.5.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12755-1 java-17-openj9-17.0.6.0-1.1 on GA media

These are all security issues fixed in the java-17-openj9-17.0.6.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12262-1 java-17-openj9-17.0.4.0-1.1 on GA media

These are all security issues fixed in the java-17-openj9-17.0.4.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12669-1 java-17-openjdk-17.0.6.0-1.1 on GA media

These are all security issues fixed in the java-17-openjdk-17.0.6.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13872-1 java-17-openjdk-17.0.11.0-1.1 on GA media

These are all security issues fixed in the java-17-openjdk-17.0.11.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12432-1 java-17-openjdk-17.0.5.0-1.1 on GA media

These are all security issues fixed in the java-17-openjdk-17.0.5.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12892-1 java-17-openjdk-17.0.7.0-1.1 on GA media

These are all security issues fixed in the java-17-openjdk-17.0.7.0-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12019-1 java-17-openjdk-17.0.3.0-1.1 on GA media

These are all security issues fixed in the java-17-openjdk-17.0.3.0-1.1 package on the GA media of openSUSE Tumbleweed...

Updated java-1.8.0, java-11, java-17, java-latest packages fix security vulnerabilities

Long Exception message leading to crash. CVE-2024-21011 HTTP/2 client improper reverse DNS lookup. CVE-2024-21012 Integer overflow in C1 compiler address generation. CVE-2024-21068 Pack200 excessive memory allocation. CVE-2024-21085 C2 compilation fails with "Exceeded noderegs array". CVE-2024-21...

SUSE: Security Advisory (SUSE-SU-2024:1499-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon Linux 2 : java-17-amazon-corretto (ALAS-2024-2528)

The version of java-17-amazon-corretto installed on the remote host is prior to 17.0.11+9-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2024-2528 advisory. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product...

Oracle Linux 8 / 9 : java-17-openjdk (ELSA-2024-1825)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-1825 advisory. 17.0.11.0.9-2.0.1 - Add Oracle vendor bug URL 1:17.0.11.0.9-2 - Update to jdk-17.0.11+9 GA - Add openjdk-17.0.11+9.tar.xz to .gitignore - Sync...