Search/CVE-2023-1108
● CVE — High

CVE-2023-1108

Vendorredhat, netappProductjboss enterprise application platform, openshift container platform, fuse, undertow, oncommand workflow automation, single sign-on, decision manager, openshift application runtimes, process automation, openshift container platform for linuxone, build of quarkus, openstack platform, jboss enterprise application platform expansion pack, integration camel k, integration service registry, openshift container platform for powerDiscoveredSep 14, 2023UpdatedNov 21, 2024

A flaw was found in undertow. This issue makes achieving a denial of service possible due to an unexpected handshake status updated in SslConduit, where the loop never terminates.

CVSS v3.1
7.5 HIGH
EPSS
1.77%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
Timeline
disclosure → media coverage
Sep 14, 2023
Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024