GHSA-gjjx-gqm4-wcgm

Source

https://github.com/advisories/GHSA-gjjx-gqm4-wcgm

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-gjjx-gqm4-wcgm/GHSA-gjjx-gqm4-wcgm.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-gjjx-gqm4-wcgm

Aliases

CVE-2018-1114

Published

2022-05-13T01:33:31Z

Modified

2023-11-08T03:59:45.467730Z

Severity

6.5 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

Uncontrolled Resource Consumption in Undertow

Details

It was found that URLResource.getLastModified() in Undertow closes the file descriptors only when they are finalized which can cause file descriptors to exhaust. This leads to a file handler leak.

Database specific

{
    "github_reviewed_at": "2022-06-29T23:28:47Z",
    "github_reviewed": true,
    "cwe_ids": [
        "CWE-400"
    ],
    "nvd_published_at": "2018-09-11T15:29:00Z",
    "severity": "MODERATE"
}

References

Affected packages

Maven / io.undertow:undertow-core

Package

Name: io.undertow:undertow-core; View open source insights on deps.dev
Purl: pkg:maven/io.undertow/undertow-core

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.4.25.Final

Affected versions

1.*

1.0.0.Alpha1

1.0.0.Alpha2

1.0.0.Alpha3

1.0.0.Alpha4

1.0.0.Alpha5

1.0.0.Alpha6

1.0.0.Alpha7

1.0.0.Alpha8

1.0.0.Alpha9

1.0.0.Alpha10

1.0.0.Alpha11

1.0.0.Alpha12

1.0.0.Alpha13

1.0.0.Alpha14

1.0.0.Alpha15

1.0.0.Alpha16

1.0.0.Alpha17

1.0.0.Alpha18

1.0.0.Alpha19

1.0.0.Alpha20

1.0.0.Alpha21

1.0.0.Alpha22

1.0.0.Beta1

1.0.0.Beta2

1.0.0.Beta3

1.0.0.Beta4

1.0.0.Beta5

1.0.0.Beta6

1.0.0.Beta7

1.0.0.Beta8

1.0.0.Beta9

1.0.0.Beta10

1.0.0.Beta11

1.0.0.Beta12

1.0.0.Beta13

1.0.0.Beta14

1.0.0.Beta15

1.0.0.Beta16

1.0.0.Beta17

1.0.0.Beta18

1.0.0.Beta19

1.0.0.Beta20

1.0.0.Beta21

1.0.0.Beta22

1.0.0.Beta23

1.0.0.Beta24

1.0.0.Beta25

1.0.0.Beta26

1.0.0.Beta27

1.0.0.Beta28

1.0.0.Beta29

1.0.0.Beta30

1.0.0.Beta31

1.0.0.Beta32

1.0.0.Beta33

1.0.0.CR1

1.0.0.CR2

1.0.0.CR3

1.0.0.CR4

1.0.0.CR5

1.0.0.Final

1.0.1.Final

1.0.2.Final

1.0.3.Final

1.0.4.Final

1.0.5.Final

1.0.6.Final

1.0.7.Final

1.0.8.Final

1.0.9.Final

1.0.10.Final

1.0.11.Final

1.0.12.Final

1.0.13.Final

1.0.14.Final

1.0.15.Final

1.0.16.Final

1.0.17.Final

1.0.18.Final

1.0.19.Final

1.1.0.Beta1

1.1.0.Beta2

1.1.0.Beta3

1.1.0.Beta4

1.1.0.Beta5

1.1.0.Beta6

1.1.0.Beta7

1.1.0.Beta8

1.1.0.CR1

1.1.0.CR2

1.1.0.CR3

1.1.0.CR4

1.1.0.CR5

1.1.0.CR6

1.1.0.CR7

1.1.0.CR8

1.1.0.Final

1.1.1.Final

1.1.2.Final

1.1.3.Final

1.1.4.Final

1.1.5.Final

1.1.6.Final

1.1.7.Final

1.1.8.Final

1.1.9.Final

1.2.0.Beta1

1.2.0.Beta2

1.2.0.Beta3

1.2.0.Beta4

1.2.0.Beta5

1.2.0.Beta6

1.2.0.Beta7

1.2.0.Beta8

1.2.0.Beta9

1.2.0.Beta10

1.2.0.CR1

1.2.0.Final

1.2.1.Final

1.2.2.Final

1.2.3.Final

1.2.4.Final

1.2.5.Final

1.2.6.Final

1.2.7.Final

1.2.8.Final

1.2.9.Final

1.2.10.Final

1.2.11.Final

1.2.12.Final

1.3.0.Beta1

1.3.0.Beta2

1.3.0.Beta3

1.3.0.Beta4

1.3.0.Beta5

1.3.0.Beta6

1.3.0.Beta7

1.3.0.Beta8

1.3.0.Beta9

1.3.0.Beta10

1.3.0.Beta11

1.3.0.Beta12

1.3.0.Beta13

1.3.0.CR1

1.3.0.CR2

1.3.0.CR3

1.3.0.Final

1.3.1.Final

1.3.2.Final

1.3.3.Final

1.3.4.Final

1.3.5.Final

1.3.6.Final

1.3.7.Final

1.3.8.Final

1.3.9.Final

1.3.10.Final

1.3.11.Final

1.3.12.Final

1.3.13.Final

1.3.14.Final

1.3.15.Final

1.3.16.Final

1.3.17.Final

1.3.18.Final

1.3.19.Final

1.3.20.Final

1.3.21.Final

1.3.22.Final

1.3.23.Final

1.3.24.Final

1.3.25.Final

1.3.26.Final

1.3.27.Final

1.3.28.Final

1.3.29.Final

1.3.30.Final

1.3.31.Final

1.3.32.Final

1.3.33.Final

1.4.0.Beta1

1.4.0.CR1

1.4.0.CR2

1.4.0.CR3

1.4.0.CR4

1.4.0.Final

1.4.1.Final

1.4.2.Final

1.4.3.Final

1.4.4.Final

1.4.5.Final

1.4.6.Final

1.4.7.Final

1.4.8.Final

1.4.9.Final

1.4.10.Final

1.4.11.Final

1.4.12.Final

1.4.13.Final

1.4.14.Final

1.4.15.Final

1.4.16.Final

1.4.17.Final

1.4.18.Final

1.4.19.Final

1.4.20.Final

1.4.21.Final

1.4.22.Final

1.4.23.Final

1.4.24.Final

Database specific

last_known_affected_version_range

"<= 1.4.24.FInal"

Maven / io.undertow:undertow-core

Package

Name: io.undertow:undertow-core; View open source insights on deps.dev
Purl: pkg:maven/io.undertow/undertow-core

Affected ranges

Type: ECOSYSTEM
Events: Introduced

2.0.0.Alpha1

Fixed

2.0.5.Final

Affected versions

2.*

2.0.0.Alpha1

2.0.0.Beta1

2.0.0.Final

2.0.1.Final

2.0.2.Final

2.0.3.Final

2.0.4.Final

Database specific

last_known_affected_version_range

"<= 2.0.4.Final"