A flaw was found in Undertow that tripped the client-side invocation timeout with certain calls made over HTTP2. This flaw allows an attacker to carry out denial of service attacks.
A process is invoked with sensitive command-line arguments, environment variables, or other elements that can be seen by other processes on the operating system.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Jboss_enterprise_application_platform | Redhat | 7.3 (including) | 7.3 (including) |
| Jboss_enterprise_application_platform | Redhat | 7.4 (including) | 7.4 (including) |
| Single_sign-on | Redhat | 7.4.10 (including) | 7.4.10 (including) |
| Single_sign-on | Redhat | 7.5.1 (including) | 7.5.1 (including) |
| Undertow | Redhat | * | 2.2.15 (excluding) |
| EAP 7.3 async | RedHat | undertow | * |
| Red Hat Fuse 7.11 | RedHat | undertow | * |
| Red Hat JBoss Enterprise Application Platform 7 | RedHat | undertow | * |
| Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 | RedHat | eap7-apache-cxf-0:3.4.10-1.SP1_redhat_00001.1.el7eap | * |
| Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 | RedHat | eap7-avro-0:1.7.6-8.redhat_00003.1.el7eap | * |
| Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 | RedHat | eap7-h2database-0:1.4.197-3.redhat_00004.1.el7eap | * |
| Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 | RedHat | eap7-jboss-annotations-api_1.3_spec-0:2.0.1-4.Final_redhat_00001.1.el7eap | * |
| Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 | RedHat | eap7-jboss-marshalling-0:2.0.15-1.Final_redhat_00001.1.el7eap | * |
| Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 | RedHat | eap7-jboss-server-migration-0:1.7.2-12.Final_redhat_00013.1.el7eap | * |
| Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 | RedHat | eap7-jboss-xnio-base-0:3.7.13-1.Final_redhat_00001.1.el7eap | * |
| Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 | RedHat | eap7-log4j-jboss-logmanager-0:1.2.2-2.Final_redhat_00002.1.el7eap | * |
| Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 | RedHat | eap7-wildfly-0:7.3.11-4.GA_redhat_00002.1.el7eap | * |
| Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 | RedHat | eap7-wss4j-0:2.3.3-2.redhat_00001.1.el7eap | * |
| Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 | RedHat | eap7-xalan-j2-0:2.7.1-38.redhat_00015.1.el7eap | * |
| Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 | RedHat | eap7-xml-security-0:2.2.3-2.redhat_00001.1.el7eap | * |
| Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 6 | RedHat | eap7-undertow-0:2.0.41-2.SP2_redhat_00001.1.el6eap | * |
| Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 7 | RedHat | eap7-undertow-0:2.0.41-2.SP2_redhat_00001.1.el7eap | * |
| Red Hat JBoss Enterprise Application Platform 7.3 for RHEL 8 | RedHat | eap7-undertow-0:2.0.41-2.SP2_redhat_00001.1.el8eap | * |
| Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8 | RedHat | eap7-undertow-0:2.2.13-1.SP2_redhat_00001.1.el8eap | * |
| Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7 | RedHat | eap7-undertow-0:2.2.13-1.SP2_redhat_00001.1.el7eap | * |
| Red Hat Single Sign-On 7.4.10 | RedHat | * | |
| Red Hat Single Sign-On 7.5 for RHEL 7 | RedHat | rh-sso7-keycloak-0:15.0.4-1.redhat_00003.1.el7sso | * |
| Red Hat Single Sign-On 7.5 for RHEL 8 | RedHat | rh-sso7-keycloak-0:15.0.4-1.redhat_00003.1.el8sso | * |
| Red Hat Support for Spring Boot 2.5.10 | RedHat | undertow | * |
| RHEL-8 based Middleware Containers | RedHat | rh-sso-7/sso74-openshift-rhel8:7.4-44 | * |
| RHEL-8 based Middleware Containers | RedHat | rh-sso-7/sso74-openj9-openshift-rhel8:7.4-59 | * |
| RHEL-8 based Middleware Containers | RedHat | rh-sso-7/sso75-openshift-rhel8:7.5-16 | * |
| RHEL-8 based Middleware Containers | RedHat | rh-sso-7/sso7-rhel8-operator-bundle:7.5.1-8 | * |
| RHSSO 7.5.1 | RedHat | * | |
| Undertow | Ubuntu | bionic | * |
| Undertow | Ubuntu | impish | * |
| Undertow | Ubuntu | kinetic | * |
| Undertow | Ubuntu | trusty | * |
| Undertow | Ubuntu | xenial | * |