CVE-2020-14384

Name of the Vulnerable Software and Affected Versions JBossWeb versions prior to 7.5.31.Final-redhat-3

Description A flaw in JBossWeb allows for a denial of service attack when sending multiple requests with invalid payload length in a WebSocket frame, affecting system availability.

Recommendations For versions prior to 7.5.31.Final-redhat-3, update to version 7.5.31.Final-redhat-3 or later to resolve the issue. As a temporary workaround, consider restricting access to WebSocket frames to minimize the risk of exploitation.