ZeroHour

CVE-2020-25689

PoC
CVSS 3.1
6.5 medium
EPSS
2%p73
Published
()
Modified
Description

A memory leak flaw was found in WildFly in all versions up to 21.0.0.Final, where host-controller tries to reconnect in a loop, generating new connections which are not properly closed while not able to connect to domain-controller. This flaw allows an attacker to cause an Out of memory (OOM) issue, leading to a denial of service. The highest threat from this vulnerability is to system availability.

Vendors
redhatnetapp
Products
wildfly, fuse, jboss data grid, jboss enterprise application platform, jboss fuse, openshift application runtimes, single sign-on, active iq unified manager, oncommand insight, service level manager
Weakness
CWE-401
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

In the news

No ingested article mentions this CVE yet.