REDHAT-BUG-2278615: Low severity Red Hat WildFly vulnerability
A vulnerability was found in Wildlfly management interface where there is no sockets limits to perform connections to http management interface. This may lead occasionally to a Denial of Service (DoS) for Wildfly server after nofile limit reaches its maximum. This requires normally local access as the management interface is not exposed by default and it is not a common configuration to make it public.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Apply a compensating control by restricting access to the Wildfly HTTP management interface (e.g., allow only trusted/local sources) since it is not exposed by default and is normally local-only.
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2278615?
The severity of REDHAT-BUG-2278615 is classified as a potential Denial of Service (DoS) issue due to unlimited socket connections.
How do I fix REDHAT-BUG-2278615?
To fix REDHAT-BUG-2278615, implement appropriate socket connection limits on the Wildfly management interface.
What are the potential impacts of not addressing REDHAT-BUG-2278615?
Not addressing REDHAT-BUG-2278615 may lead to a Denial of Service (DoS) condition when the nofile limit is reached.
Who is affected by REDHAT-BUG-2278615?
REDHAT-BUG-2278615 affects users of Red Hat Wildfly who utilize the management interface without socket limits.
Is there a workaround for REDHAT-BUG-2278615?
Yes, temporarily restricting the number of concurrent socket connections can serve as a workaround for REDHAT-BUG-2278615.