← Database

CVE-2023-1108

HIGH CVSS: 7.5 Published: 2023-09-14 Modified: 2026-06-17

Description

A flaw was found in undertow. This issue makes achieving a denial of service possible due to an unexpected handshake status updated in SslConduit, where the loop never terminates.

Affected Platforms

Redhat UndertowRedhat Openshift Application RuntimesRedhat Enterprise LinuxRedhat Openstack PlatformRedhat Process AutomationRedhat Integration Camel KRedhat Integration Service RegistryRedhat Decision ManagerRedhat Jboss Enterprise Application Platform Expansion PackRedhat Single Sign-On

Weakness Type

CWE-835, CWE-835

References