Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2026-15561

Undertow-core: oom via missing limits in chunked trailer in eap's undertow

Published
Last modified
published
Not listed in CISA KEV
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: yes
  • Technical impact: partial

Summary

A flaw was found in EAP's undertow http/1.1 chunked-transfer decoder. missing limits on size and count would allow an attacker to use an unauthenticated connection to drive the JVM to an OutOfMemory error, stopping all deployments on the listener, and achieving Denial of Service.

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: yes · Technical impact: partial

  3. Record last updated

Affected versions

  • Red Hat Red Hat JBoss Enterprise Application Platform 7.4.25

    Version range not reported

  • eap7-activemq-artemis

    Version range not reported

  • eap7-glassfish-jsf

    Version range not reported

  • eap7-ironjacamar

    Version range not reported

  • eap7-jackson-annotations

    Version range not reported

  • eap7-jackson-core

    Version range not reported

  • eap7-jackson-databind

    Version range not reported

  • eap7-jackson-jaxrs-providers

    Version range not reported

  • eap7-jackson-modules-base

    Version range not reported

  • eap7-jackson-modules-java8

    Version range not reported

  • eap7-jboss-remoting

    Version range not reported

  • eap7-jboss-server-migration

    Version range not reported

  • eap7-netty

    Version range not reported

  • eap7-netty-transport-native-epoll

    Version range not reported

  • eap7-picketlink-bindings

    Version range not reported

  • eap7-picketlink-federation

    Version range not reported

  • eap7-undertow

    Version range not reported

  • eap7-wildfly

    Version range not reported

  • eap7-activemq-artemis

    Version range not reported

  • eap7-glassfish-jsf

    Version range not reported

  • eap7-ironjacamar

    Version range not reported

  • eap7-jackson-annotations

    Version range not reported

  • eap7-jackson-core

    Version range not reported

  • eap7-jackson-databind

    Version range not reported

  • eap7-jackson-jaxrs-providers

    Version range not reported

  • eap7-jackson-modules-base

    Version range not reported

  • eap7-jackson-modules-java8

    Version range not reported

  • eap7-jboss-remoting

    Version range not reported

  • eap7-jboss-server-migration

    Version range not reported

  • eap7-netty

    Version range not reported

  • eap7-netty-transport-native-epoll

    Version range not reported

  • eap7-picketlink-bindings

    Version range not reported

  • eap7-picketlink-federation

    Version range not reported

  • eap7-undertow

    Version range not reported

  • eap7-wildfly

    Version range not reported

  • eap7-activemq-artemis

    Version range not reported

  • eap7-glassfish-jsf

    Version range not reported

  • eap7-ironjacamar

    Version range not reported

  • eap7-jackson-annotations

    Version range not reported

  • eap7-jackson-core

    Version range not reported

  • eap7-jackson-databind

    Version range not reported

  • eap7-jackson-jaxrs-providers

    Version range not reported

  • eap7-jackson-modules-base

    Version range not reported

  • eap7-jackson-modules-java8

    Version range not reported

  • eap7-jboss-remoting

    Version range not reported

  • eap7-jboss-server-migration

    Version range not reported

  • eap7-netty

    Version range not reported

  • eap7-netty-transport-native-epoll

    Version range not reported

  • eap7-picketlink-bindings

    Version range not reported

  • eap7-picketlink-federation

    Version range not reported

  • eap7-undertow

    Version range not reported

  • eap7-wildfly

    Version range not reported

  • io.undertow/undertow-core

    Version range not reported

  • eap8-activemq-artemis

    Version range not reported

  • eap8-apache-cxf

    Version range not reported

  • eap8-artemis-wildfly-integration

    Version range not reported

  • eap8-bouncycastle

    Version range not reported

  • eap8-cryptacular

    Version range not reported

  • eap8-eap-product-conf-parent

    Version range not reported

  • eap8-hibernate

    Version range not reported

  • eap8-httpcomponents-asyncclient

    Version range not reported

  • eap8-ironjacamar

    Version range not reported

  • eap8-jackson-annotations

    Version range not reported

  • eap8-jackson-core

    Version range not reported

  • eap8-jackson-databind

    Version range not reported

  • eap8-jackson-dataformats-text

    Version range not reported

  • eap8-jackson-jaxrs-providers

    Version range not reported

  • eap8-jackson-modules-base

    Version range not reported

  • eap8-jackson-modules-java8

    Version range not reported

  • eap8-jakarta-xml-bind-api

    Version range not reported

  • eap8-jaxb

    Version range not reported

  • eap8-jaxbintros

    Version range not reported

  • eap8-jboss-logging

    Version range not reported

  • eap8-jboss-remoting

    Version range not reported

  • eap8-jbossws-api

    Version range not reported

  • eap8-jbossws-common-tools

    Version range not reported

  • eap8-jbossws-cxf

    Version range not reported

  • eap8-jbossws-jaxws-undertow-httpspi

    Version range not reported

  • eap8-jbossws-spi

    Version range not reported

  • eap8-jsf-impl

    Version range not reported

  • eap8-log4j

    Version range not reported

  • eap8-neethi

    Version range not reported

  • eap8-netty

    Version range not reported

  • eap8-netty-transport-native-epoll

    Version range not reported

  • eap8-nimbus-jose-jwt

    Version range not reported

  • eap8-parsson

    Version range not reported

  • eap8-saaj-impl

    Version range not reported

  • eap8-slf4j

    Version range not reported

  • eap8-undertow

    Version range not reported

  • eap8-wildfly

    Version range not reported

  • eap8-wildfly-elytron

    Version range not reported

  • eap8-wildfly-javadocs

    Version range not reported

  • eap8-ws-commons-XmlSchema

    Version range not reported

  • eap8-xml-security

    Version range not reported

  • eap8-activemq-artemis

    Version range not reported

  • eap8-apache-cxf

    Version range not reported

  • eap8-artemis-wildfly-integration

    Version range not reported

  • eap8-bouncycastle

    Version range not reported

  • eap8-cryptacular

    Version range not reported

  • eap8-eap-product-conf-parent

    Version range not reported

  • eap8-hibernate

    Version range not reported

  • eap8-httpcomponents-asyncclient

    Version range not reported

  • eap8-ironjacamar

    Version range not reported

  • eap8-jackson-annotations

    Version range not reported

  • eap8-jackson-core

    Version range not reported

  • eap8-jackson-databind

    Version range not reported

  • eap8-jackson-dataformats-text

    Version range not reported

  • eap8-jackson-jaxrs-providers

    Version range not reported

  • eap8-jackson-modules-base

    Version range not reported

  • eap8-jackson-modules-java8

    Version range not reported

  • eap8-jakarta-xml-bind-api

    Version range not reported

  • eap8-jaxb

    Version range not reported

  • eap8-jaxbintros

    Version range not reported

  • eap8-jboss-logging

    Version range not reported

  • eap8-jboss-remoting

    Version range not reported

  • eap8-jbossws-api

    Version range not reported

  • eap8-jbossws-common-tools

    Version range not reported

  • eap8-jbossws-cxf

    Version range not reported

  • eap8-jbossws-jaxws-undertow-httpspi

    Version range not reported

  • eap8-jbossws-spi

    Version range not reported

  • eap8-jsf-impl

    Version range not reported

  • eap8-log4j

    Version range not reported

  • eap8-neethi

    Version range not reported

  • eap8-netty

    Version range not reported

  • eap8-netty-transport-native-epoll

    Version range not reported

  • eap8-nimbus-jose-jwt

    Version range not reported

  • eap8-parsson

    Version range not reported

  • eap8-saaj-impl

    Version range not reported

  • eap8-slf4j

    Version range not reported

  • eap8-undertow

    Version range not reported

  • eap8-wildfly

    Version range not reported

  • eap8-wildfly-elytron

    Version range not reported

  • eap8-wildfly-javadocs

    Version range not reported

  • eap8-ws-commons-XmlSchema

    Version range not reported

  • eap8-xml-security

    Version range not reported

  • eap8-activemq-artemis

    Version range not reported

  • eap8-apache-cxf

    Version range not reported

  • eap8-artemis-wildfly-integration

    Version range not reported

  • eap8-bouncycastle

    Version range not reported

  • eap8-cryptacular

    Version range not reported

  • eap8-eap-product-conf-parent

    Version range not reported

  • eap8-hibernate

    Version range not reported

  • eap8-httpcomponents-asyncclient

    Version range not reported

  • eap8-ironjacamar

    Version range not reported

  • eap8-jackson-annotations

    Version range not reported

  • eap8-jackson-core

    Version range not reported

  • eap8-jackson-databind

    Version range not reported

  • eap8-jackson-dataformats-text

    Version range not reported

  • eap8-jackson-jaxrs-providers

    Version range not reported

  • eap8-jackson-modules-base

    Version range not reported

  • eap8-jackson-modules-java8

    Version range not reported

  • eap8-jakarta-xml-bind-api

    Version range not reported

  • eap8-jaxb

    Version range not reported

  • eap8-jaxbintros

    Version range not reported

  • eap8-jboss-logging

    Version range not reported

  • eap8-jboss-remoting

    Version range not reported

  • eap8-jbossws-api

    Version range not reported

  • eap8-jbossws-common-tools

    Version range not reported

  • eap8-jbossws-cxf

    Version range not reported

  • eap8-jbossws-jaxws-undertow-httpspi

    Version range not reported

  • eap8-jbossws-spi

    Version range not reported

  • eap8-jsf-impl

    Version range not reported

  • eap8-log4j

    Version range not reported

  • eap8-neethi

    Version range not reported

  • eap8-netty

    Version range not reported

  • eap8-netty-transport-native-epoll

    Version range not reported

  • eap8-nimbus-jose-jwt

    Version range not reported

  • eap8-parsson

    Version range not reported

  • eap8-saaj-impl

    Version range not reported

  • eap8-slf4j

    Version range not reported

  • eap8-undertow

    Version range not reported

  • eap8-wildfly

    Version range not reported

  • eap8-wildfly-elytron

    Version range not reported

  • eap8-wildfly-javadocs

    Version range not reported

  • eap8-ws-commons-XmlSchema

    Version range not reported

  • eap8-xml-security

    Version range not reported

  • undertow-core

    Version range not reported

  • undertow-core

    Version range not reported

References 10

access.redhat.com

bugzilla.redhat.com