Vulnerability Database
289,599
Total vulnerabilities in the database
CVE-2017-2670
It was found in Undertow before 1.3.28 that with non-clean TCP close, the Websocket server gets into infinite loop on every IO thread, effectively causing DoS.
| Software | From | Fixed in |
|---|---|---|
| redhat / undertow | - | 1.3.28 |
| debian / debian_linux | 9.0 | 9.0.x |
| redhat / jboss_enterprise_application_platform | 6.0.0 | 6.0.0.x |
| redhat / jboss_enterprise_application_platform | 7.0.0 | 7.0.0.x |
| redhat / jboss_enterprise_application_platform | 7.1.0 | 7.1.0.x |
io.undertow / undertow-core
|
- | 1.3.28 |
- http://rhn.redhat.com/errata/RHSA-2017-1409.html
- http://www.securityfocus.com/bid/98965
- https://access.redhat.com/errata/RHSA-2017:1410
- https://access.redhat.com/errata/RHSA-2017:1411
- https://access.redhat.com/errata/RHSA-2017:1412
- https://access.redhat.com/errata/RHSA-2017:3454
- https://access.redhat.com/errata/RHSA-2017:3455
- https://access.redhat.com/errata/RHSA-2017:3456
- https://access.redhat.com/errata/RHSA-2017:3458
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2670
- https://www.debian.org/security/2017/dsa-3906