1657 matches found
Linux Distros Unpatched Vulnerability : CVE-2024-5971
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in Undertow, where the chunked response hangs after the body was flushed. The response headers and body were sent but the client would...
Linux Distros Unpatched Vulnerability : CVE-2020-10687
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was discovered in all versions of Undertow before Undertow 2.2.0.Final, where HTTP request smuggling related to CVE-2017-2666 is possible against HTTP/1....
Linux Distros Unpatched Vulnerability : CVE-2019-14888
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in the Undertow HTTP server in versions before 2.0.28.SP1 when listening on HTTPS. An attacker can target the HTTPS port to carry out ...
Linux Distros Unpatched Vulnerability : CVE-2023-1108
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in undertow. This issue makes achieving a denial of service possible due to an unexpected handshake status updated in SslConduit, where the loo...
Linux Distros Unpatched Vulnerability : CVE-2020-27782
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in the Undertow AJP connector. Malicious requests and abrupt connection closes could be triggered by an attacker using query strings with non-R...
Linux Distros Unpatched Vulnerability : CVE-2020-10705
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was discovered in Undertow in versions before Undertow 2.1.1.Final where certain requests to the Expect: 100-continue header may cause an out of memory...
Linux Distros Unpatched Vulnerability : CVE-2023-3223
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in undertow. Servlets annotated with @MultipartConfig may cause an OutOfMemoryError due to large multipart content. This may allow unauthorized...
Linux Distros Unpatched Vulnerability : CVE-2021-3859
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Undertow that tripped the client-side invocation timeout with certain calls made over HTTP2. This flaw allows an attacker to carry out denia...
Linux Distros Unpatched Vulnerability : CVE-2020-1745
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A file inclusion vulnerability was found in the AJP connector enabled with a default AJP configuration port of 8009 in Undertow version 2.0.29.Final and before...
Linux Distros Unpatched Vulnerability : CVE-2020-1757
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in all undertow-2.x.x SP1 versions prior to undertow-2.0.30.SP1, all undertow-1.x.x and undertow-2.x.x versions prior to undertow-2.1.0.Final,...
Linux Distros Unpatched Vulnerability : CVE-2017-12196
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - undertow before versions 1.4.18.SP1, 2.0.2.Final, 1.4.24.Final was found vulnerable when using Digest authentication, the server does not ensure that the value ...
Linux Distros Unpatched Vulnerability : CVE-2024-1635
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in Undertow. This vulnerability impacts a server that supports the wildfly-http- client protocol. Whenever a malicious user opens and...
Linux Distros Unpatched Vulnerability : CVE-2024-3653
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in Undertow. This issue requires enabling the learning-push handler in the server's config, which is disabled by default, leaving the...
Linux Distros Unpatched Vulnerability : CVE-2021-3690
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Undertow. A buffer leak on the incoming WebSocket PONG message may lead to memory exhaustion. This flaw allows an attacker to cause a denial...
Malicious code in yak-undertow-pzf309-project (npm)
The package yak-undertow-pzf309-project was found to contain malicious code...
Malicious code in cat-undertow-nlw175-project (npm)
The package cat-undertow-nlw175-project was found to contain malicious code...
Malicious code in peony-undertow-ugg597-project (npm)
The package peony-undertow-ugg597-project was found to contain malicious code...
Malicious code in undertow-amber-tpr741-project (npm)
The package undertow-amber-tpr741-project was found to contain malicious code...
