Search for packages
| purl | pkg:maven/io.undertow/undertow-core@2.2.19 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk | 4.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-93ug-x19e-aaab
Aliases: CVE-2022-1259 |
CVE-2022-1259 undertow: potential security issue in flow control over HTTP/2 may lead to DOS(incomplete fix for CVE-2021-3629) |
Affected by 12 other vulnerabilities. |
|
VCID-sssr-kebe-aaah
Aliases: CVE-2022-2764 |
CVE-2022-2764 Undertow: DoS can be achieved as Undertow server waits for the LAST_CHUNK forever for EJB invocations |
Affected by 12 other vulnerabilities. Affected by 11 other vulnerabilities. |
|
VCID-tw4d-xnwu-aaah
Aliases: CVE-2022-1319 |
A flaw was found in Undertow. For an AJP 400 response, EAP 7 is improperly sending two response packets, and those packets have the reuse flag set even though JBoss EAP closes the connection. A failure occurs when the connection is reused after a 400 by CPING since it reads in the second SEND_HEADERS response packet instead of a CPONG. |
Affected by 12 other vulnerabilities. Affected by 11 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||