Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:4503
HistoryJun 29, 2017 - 6:57 a.m.

Denial Of Service (DoS)

2017-06-2906:57:55
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9

EPSS

0.024

Percentile

90.0%

Undertow is vulnerable to denial of service (DoS) attacks. The library does not close its streaming websocket properly, leading to an infinite loop. A malicious user can use this behavior to cause multiple infinite loops that lead to the system running out of resources and crashing.