Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 07:49:12 +0000 CVE-2023-1108 — Undertow: infinite loop in sslconduit during close https://vulnerability.circl.lu/vuln/cve-2023-1108 <p><strong>Affected:</strong> io.undertow:undertow-core, Red Hat EAP 7.4.10 release, Red Hat Fuse 7.12, Red Hat JBoss Enterprise Application Platform 7.1.0, Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8, Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9, Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7, Red Hat Single Sign-On 7, Red Hat Single Sign-On 7.6 for RHEL 7, Red Hat Single Sign-On 7.6 for RHEL 8 and 13 more</p> <p>A flaw was found in undertow. This issue makes achieving a denial of service possible due to an unexpected handshake status updated in SslConduit, where the loop never terminates.</p> <p><strong>Affected:</strong> io.undertow:undertow-core, Red Hat EAP 7.4.10 release, Red Hat Fuse 7.12, Red Hat JBoss Enterprise Application Platform 7.1.0, Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8, Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9, Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7, Red Hat Single Sign-On 7, Red Hat Single Sign-On 7.6 for RHEL 7, Red Hat Single Sign-On 7.6 for RHEL 8 and 13 more</p> <p>A flaw was found in undertow. This issue makes achieving a denial of service possible due to an unexpected handshake status updated in SslConduit, where the loop never terminates.</p> https://vulnerability.circl.lu/vuln/cve-2023-1108