REDHAT-BUG-2278615
First published: Thu May 02 2024(Updated: )
A vulnerability was found in Wildlfly management interface where there is no sockets limits to perform connections to http management interface. This may lead occasionally to a Denial of Service (DoS) for Wildfly server after nofile limit reaches its maximum. This requires normally local access as the management interface is not exposed by default and it is not a common configuration to make it public.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| WildFly |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://access.redhat.com/errata/RHSA-2024:8077
- https://access.redhat.com/errata/RHSA-2024:8076
- https://access.redhat.com/errata/RHSA-2024:8075
- https://access.redhat.com/errata/RHSA-2024:8080
- https://access.redhat.com/errata/RHSA-2024:8824
- https://access.redhat.com/errata/RHSA-2024:8823
- https://access.redhat.com/errata/RHSA-2024:8826
- https://bugzilla.redhat.com/show_bug.cgi?id=2278615
Frequently Asked Questions
What is the severity of REDHAT-BUG-2278615?
The severity of REDHAT-BUG-2278615 is classified as a potential Denial of Service (DoS) issue due to unlimited socket connections.
How do I fix REDHAT-BUG-2278615?
To fix REDHAT-BUG-2278615, implement appropriate socket connection limits on the Wildfly management interface.
What are the potential impacts of not addressing REDHAT-BUG-2278615?
Not addressing REDHAT-BUG-2278615 may lead to a Denial of Service (DoS) condition when the nofile limit is reached.
Who is affected by REDHAT-BUG-2278615?
REDHAT-BUG-2278615 affects users of Red Hat Wildfly who utilize the management interface without socket limits.
Is there a workaround for REDHAT-BUG-2278615?
Yes, temporarily restricting the number of concurrent socket connections can serve as a workaround for REDHAT-BUG-2278615.
- agent/severity
- agent/event
- agent/description
- agent/type
- agent/first-publish-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2024-4029
- agent/references
- agent/last-modified-date
- agent/source
- agent/tags
- agent/softwarecombine
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/red hat
- canonical/wildfly