CVE-2016-7046

undertow: Long URL proxy request lead to java.nio.BufferOverflowException and DoS

Published Oct 3, 2016 CVSS 3.0 · 5.9 Medium EPSS 2.5% KEV · Not listed
Description
Red Hat JBoss Enterprise Application Platform (EAP) 7, when operating as a reverse-proxy with default buffer sizes, allows remote attackers to cause a denial of service (CPU and disk consumption) via a long URL.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2022-2166 Red Hat JBoss Enterprise Application Platform (EAP) 7, when operating as a reverse-proxy with default buffer sizes, allows remote attackers to cause a denial of service (CPU and disk consumption) via a long URL.
Github GHSA Github GHSA GHSA-3f57-w2rp-72fc Undertow Uncaught Exception vulnerability
History
Type Values Removed Values Added
CPEs cpe:/a:redhat:jboss_enterprise_application_platform:7.1::el7
Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 6, 2024, 1:50 AM
Reserved
Aug 23, 2016, 12:00 AM
Status
Modified
Published
Oct 3, 2016, 9:59 PM
Modified
Jun 17, 2026, 12:52 AM
Severity
Important
Public date
Sep 15, 2016, 12:00 AM