https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-01T07:49:34.074433+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2023-1108 CVE-2023-1108 — Undertow: infinite loop in sslconduit during close 2026-10-01T07:49:34.092470+00:00

Affected: io.undertow:undertow-core, Red Hat EAP 7.4.10 release, Red Hat Fuse 7.12, Red Hat JBoss Enterprise Application Platform 7.1.0, Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8, Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9, Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7, Red Hat Single Sign-On 7, Red Hat Single Sign-On 7.6 for RHEL 7, Red Hat Single Sign-On 7.6 for RHEL 8 and 13 more

A flaw was found in undertow. This issue makes achieving a denial of service possible due to an unexpected handshake status updated in SslConduit, where the loop never terminates.