CVE-2019-19343

Fixed in a distro release EPSS 2%

A flaw was found in Undertow when using Remoting as shipped in Red Hat Jboss EAP before version 7.2.4. A memory leak in HttpOpenListener due to holding remote connections indefinitely may lead to denial of service. Versions before undertow 2.0.25.SP1 and jboss-remoting 5.0.14.SP1 are believed to be vulnerable.

Published 2021-03-23 · CVE record · OSV

Products: redhat jboss_remoting, redhat jboss_enterprise_application_platform, redhat undertow, netapp active_iq_unified_manager

Distro releases