Vulnerability Database
289,571
Total vulnerabilities in the database
CVE-2020-25689
A memory leak flaw was found in WildFly in all versions up to 21.0.0.Final, where host-controller tries to reconnect in a loop, generating new connections which are not properly closed while not able to connect to domain-controller. This flaw allows an attacker to cause an Out of memory (OOM) issue, leading to a denial of service. The highest threat from this vulnerability is to system availability.
| Software | From | Fixed in |
|---|---|---|
| redhat / wildfly | - | 21.0.0.x |
| redhat / jboss_enterprise_application_platform | 7.0.0 | 7.0.0.x |
| redhat / single_sign-on | 7.0 | 7.0.x |
| redhat / jboss_fuse | 7.0.0 | 7.0.0.x |
| redhat / jboss_data_grid | 7.0.0 | 7.0.0.x |
| redhat / fuse | 6.0.0 | 6.0.0.x |
org.wildfly / wildfly-dist
|
- | 21.0.1 |