CVE-2016-9589: High severity red hat jboss wildfly application server vulnerability
Undertow in Red Hat wildfly before version 11.0.0.Beta1 is vulnerable to a resource exhaustion resulting in a denial of service. Undertow keeps a cache of seen HTTP headers in persistent connections. It was found that this cache can easily exploited to fill memory with garbage, up to "max-headers" (default 200) "max-header-size" (default 1MB) per active TCP connection.
Other sources
Undertow keeps a cache of seen HTTP headers in persistent connections. It was found that this cache can easily exploited to fill memory with garbage, up to "max-headers" (default 200) "max-header-size" (default 1MB) per active TCP connection.
Upstream bug:
https://issues.jboss.org/browse/WFLY-7725
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-9589?
CVE-2016-9589 has a severity rating that makes it critical due to its potential to cause denial of service.
How do I fix CVE-2016-9589?
To fix CVE-2016-9589, upgrade Undertow to version 11.0.0.Beta1 or later.
What type of vulnerability is CVE-2016-9589?
CVE-2016-9589 is a resource exhaustion vulnerability that can lead to a denial of service.
Which versions are affected by CVE-2016-9589?
CVE-2016-9589 affects JBoss WildFly versions before 11.0.0.Beta1, including 10.1.0 and earlier.
What component is impacted by CVE-2016-9589?
CVE-2016-9589 impacts the Undertow component of JBoss WildFly, specifically its HTTP header cache.