CVE-2020-10705

undertow: Memory exhaustion issue in HttpReadListener via "Expect: 100-continue" header

Published Jun 10, 2020 CVSS 3.1 · 7.5 High EPSS 1.5% KEV · Not listed
Description
A flaw was discovered in Undertow in versions before Undertow 2.1.1.Final where certain requests to the "Expect: 100-continue" header may cause an out of memory error. This flaw may potentially lead to a denial of service.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2021-0822 A flaw was discovered in Undertow in versions before Undertow 2.1.1.Final where certain requests to the "Expect: 100-continue" header may cause an out of memory error. This flaw may potentially lead to a denial of service.
Github GHSA Github GHSA GHSA-g4cp-h53p-v3v8 Allocation of Resources Without Limits or Throttling in Undertow
History

No history.