CVE-2021-3637

A flaw was found in keycloak-model-infinispan in keycloak versions before 14.0.0 where authenticationSessions map in RootAuthenticationSessionEntity grows boundlessly which could lead to a DoS attack...

PT-2021-21255

Name of the Vulnerable Software and Affected Versions keycloak versions prior to 14.0.0 Description A flaw was found in keycloak-model-infinispan where the authenticationSessions map in RootAuthenticationSessionEntity grows boundlessly, which could lead to a Denial of Service DoS attack...

CVE-2021-3637: Allocation of Resources Without Limits or Throttling

A flaw was found in keycloak-model-infinispan in keycloak versions before 14.0.0 where authenticationSessions map in RootAuthenticationSessionEntity grows boundlessly which could lead to a DoS attack...

Denial Of Service (DoS) Through Infinite Loop

keycloak-model-infinispan is vulnerable to denial of service DoS attacks through an infinite loop. The vulnerability exists due to an infinite loop that could occur during the replacement of a session where the replacement could fail, causing a DoS...