PT-2018-10331

CVE-2018-1114

·

Published

2018-09-11

·

Updated

2022-05-13

Description by

CVSS 3.1
6.5
Medium
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Undertow (affected versions not specified)
Description A file handler leak issue was discovered in Undertow, where the URLResource.getLastModified() function fails to close file descriptors until they are finalized, potentially leading to file descriptor exhaustion.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-400: Uncontrolled Resource Consumption
Related identifiers
CVE-2018-1114
GHSA-GJJX-GQM4-WCGM
RHSA-2018:2089
RHSA-2018:2090
RHSA-2018:2643
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com