undertow: Undertow MadeYouReset HTTP/2 DDoS Vulnerability

A flaw was found in Undertow where malformed client requests can trigger server-side stream resets without triggering abuse counters. This issue, referred to as the "MadeYouReset" attack, allows malicious clients to induce excessive server workload by repeatedly causing server-side stream aborts...

undertow-core: Undertow HTTP Server Fails to Reject Malformed Host Headers Leading to Potential Cache Poisoning and SSRF

A flaw was found in the Undertow HTTP server core, which is used in WildFly, JBoss EAP, and other Java applications. The Undertow library fails to properly validate the Host header in incoming HTTP requests.As a result, requests containing malformed or malicious Host headers are processed without...

CVE-2026-56139

camel-undertow Rest DSL muteException スタックトレース開示再現器 CVE-2026-56139 このプロジェクトは、Apache Camel の camel-undertow Rest DSL コンシューマにおける 情報漏洩 の問題を示しています。追跡番号は CVE-2026-56139 です。muteException オプションは、キャッチされなかった処理例外の詳細を HTTP クライアントに返すかどうかを制御します。プレーンな undertow エンドポイントではこのオプションは機能しますが、undertow Rest DSL は...

undertow-io__undertow_CVE-2014-7816_1-0-16-Final

Undertow Undertow는 비동기non-blocking IO 기반의 Java 웹 서버입니다. 다음과 같은 몇 가지 다른 부분으로 구성됩니다: 동기blocking 및 비동기non-blocking IO를 모두 지원하는 코어 HTTP 서버 Servlet 3.1 구현 JSR-356 호환 웹 소켓 구현 Website: http://undertow.io Issues: https://issues.jboss.org/browse/UNDERTOW Project Lead: Stuart Douglas [email protected]...

CVE-2026-49365

CVE-2026-49365 — camel-netty-http / camel-undertow muteException スタックトレースの開示 同じApache Camel脆弱性に対する実行可能な概念実証再現コードで、ランタイムごとに1つずつ用意されています： ランタイム| ディレクトリ| スタック| 表示されるコンポーネント ---|---|---|--- Camel Spring Boot| camel-spring-boot/| Spring Boot 3.2.0 + camel-spring-boot 4.18.2| netty-http および undertow...

CVE-2025-9784

CVE-2025-9784 MadeYouReset HTTP/2 취약점 테스트 개요 이 저장소는 Undertow HTTP/2 서버 구현에서 CVE-2025-9784 취약점일명 "MadeYouReset" HTTP/2 서비스 거부DoS 공격을 테스트하기 위한 간단하고 효과적인 bash 스크립트를 포함합니다. 이 취약점은 공격자가 서버 측 스트림 재설정을 반복적으로 유발하여 과도한 서버 작업 부하를 일으키고, 잠재적인 서비스 중단을 초래할 수 있습니다. 기능 대상 서버가 HTTP/2 프로토콜을 지원하는지 감지합니다. 기준 응답 시간을...

CVE-2026-21876

CVE-2026-21876 OWASP CRS WAF 우회 CVE-2026-21876 도커 컨테이너 + 최소 PoC. @airween과 @fzipi님께 각각 빠른 응대에 감사드립니다! 취약점 수정이 매우 짧은 시간 안에 준비되었습니다. PoC 실행: cd springbootundertowstand or aspnetstand docker compose up --build python3 demo/send.py BASELINE - 403, BYPASS - 200 + reconstructed payload 참고 자료 Github 보안 ...

CVE-2025-12543-Fix-for-Wildfly

WildFly 11.0.0.Final 기본 이미지 — CVE-2025-12543 패치 개요 이 저장소는 CVE-2025-12543Undertow의 치명적인 Host 헤더 검증 취약점에 대한 백포트 수정 사항이 포함된 WildFly 11.0.0.Final 기반의 Docker 기본 이미지를 제공합니다. 이 이미지는 동료들에게 기본 이미지로 제공하기 위해 제작되었습니다. 동료들은 자체 .war 애플리케이션과 standalone.xml을 이 이미지 위에 배포할 수 있습니다. CVE-2025-12543 요약 필드| 세부 정보 ---|-...

CVE-2026-78329

CVE-2026-78329 — camel-undertow のヘッダーフィルター戦略が適用されない websocket. インジェクション Apache Camel の脆弱性に対する実行可能な PoC 再現コードです。UndertowEndpoint はデフォルトで headerFilterStrategy を基底の HttpHeaderFilterStrategy に設定し、そのインスタンスを自身が作成する UndertowHttpBinding に渡すため、DefaultUndertowHttpBinding がインストールする...

artemis-server: artemis-jms-client: artemis-core-client: undertow-core: wildfly-messaging-activemq-subsystem: artemis messaging handlers in Red Hat EAP permit deserialization by default

EAP's Artemis deserialization configuration permits deserialization by default. ObjectMessage.getObject uses ObjectInputStreamWithClassLoader, which implements allow-list/block-list filtering via its checkSecurity/isTrustedType method. However, by default both allow-list and block-list are empty...

undertow-core: Undertow:HTTP request smuggling via oversized chunk-size bit overlap

A flaw was found in the ChunkReader component of the Undertow HTTP server, which is used by WildFly and JBoss EAP to handle chunked transfer encoding. The issue occurs because the parser uses a single internal variable to store both the remaining chunk size and state flags. By sending a specially...

undertow-core: Undertow: Authentication Bypass via AJP ssl_cert/is_ssl Forgery

the Undertow AJP listener honours forged sslcert and isssl AJP attributes without requiring any shared-secret authentication. This enables an unauthenticated attacker with direct TCP access to port 8009 to bypass CLIENT-CERT authentication by injecting a forged X.509 certificate via the AJP...

undertow-core: OOM via missing limits in chunked trailer in EAP's Undertow

A flaw was found in EAP's undertow http/1.1 chunked-transfer decoder. missing limits on size and count would allow an attacker to use an unauthenticated connection to drive the JVM to an OutOfMemory error, stopping all deployments on the listener, and achieving Denial of Service...

undertow-core: Undertow: Denial of Service via WebSocket permessage-deflate processing

A flaw was found in Undertow. A remote attacker could exploit this vulnerability by sending specially crafted WebSocket messages with permessage-deflate negotiated. This could lead to excessive memory consumption due to the PerMessageDeflateFunction.largerBuffer method using exponential doubling,...

undertow: undertow-websockets: Undertow: Pre-Auth DoS on websocket endpoint with @ServerEndpoint class with any @OnMessage method

A flaw was found in Undertow. A remote attacker can cause Out of Memory on websockets endpoint without authentication on any @ServerEndpoint class that has any @OnMessage method. This allows an attacker to cause Denial of Service attack without authentication and using only a standard WebSocket...

artemis-server: undertow-core: wildfly-messaging-activemq-subsystem: artemis core protocol permits unauthed queue creation

Artemis CORE protocol channel allows unauthed queue creation. an unauthenticated attacker can send CREATEQUEUE packets on channel 1 via the :8080 HTTP-upgrade path to create arbitrary durable JMS queues on the embedded broker. This can be used for resource exhaustion and persistent broker-state...

undertow-core: Undertow: Authentication Bypass via AJP ssl_cert/is_ssl Forgery

the Undertow AJP listener honours forged sslcert and isssl AJP attributes without requiring any shared-secret authentication. This enables an unauthenticated attacker with direct TCP access to port 8009 to bypass CLIENT-CERT authentication by injecting a forged X.509 certificate via the AJP...

undertow-core: Undertow: Denial of Service via WebSocket permessage-deflate processing

A flaw was found in Undertow. A remote attacker could exploit this vulnerability by sending specially crafted WebSocket messages with permessage-deflate negotiated. This could lead to excessive memory consumption due to the PerMessageDeflateFunction.largerBuffer method using exponential doubling,...

undertow-core: Undertow:HTTP request smuggling via oversized chunk-size bit overlap

A flaw was found in the ChunkReader component of the Undertow HTTP server, which is used by WildFly and JBoss EAP to handle chunked transfer encoding. The issue occurs because the parser uses a single internal variable to store both the remaining chunk size and state flags. By sending a specially...

undertow: undertow-websockets: Undertow: Pre-Auth DoS on websocket endpoint with @ServerEndpoint class with any @OnMessage method

A flaw was found in Undertow. A remote attacker can cause Out of Memory on websockets endpoint without authentication on any @ServerEndpoint class that has any @OnMessage method. This allows an attacker to cause Denial of Service attack without authentication and using only a standard WebSocket...