CVE-2016-7046
published 2016-10-03CVE-2016-7046: Red Hat JBoss Enterprise Application Platform (EAP) 7, when operating as a reverse-proxy with default buffer sizes, allows remote attackers to cause a denial…
medium5.9CVSS 3.0
AVNACHPRNUINSUCNINAH
Red Hat JBoss Enterprise Application Platform (EAP) 7, when operating as a reverse-proxy with default buffer sizes, allows remote attackers to cause a denial of service (CPU and disk consumption) via a long URL.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | undertow | < undertow 1.4.3-1 (forky) | undertow 1.4.3-1 (forky) |
| redhat | jboss_enterprise_application_platform | — | — |
| redhat | undertow | >= 0 < 1.4.3-1 | 1.4.3-1 |
CVSS provenance
nvdv3.05.9MEDIUMCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
osv5.9MEDIUM