ghsa-x7g6-rwhc-g7mj
Vulnerability from github
Published
2024-05-02 15:30
Modified
2024-05-03 20:11
Severity
Summary
Wildfly vulnerable to denial of service
Details
A vulnerability was found in Wildfly’s management interface. Due to the lack of limitation of sockets for the management interface, it may be possible to cause a denial of service hitting the nofile limit as there is no possibility to configure or set a maximum number of connections.
{ "affected": [ { "package": { "ecosystem": "Maven", "name": "org.wildfly:wildfly-domain-http" }, "ranges": [ { "events": [ { "introduced": "0" }, { "last_affected": "24.0.0.Final" } ], "type": "ECOSYSTEM" } ] } ], "aliases": [ "CVE-2024-4029" ], "database_specific": { "cwe_ids": [ "CWE-770" ], "github_reviewed": true, "github_reviewed_at": "2024-05-03T20:11:59Z", "nvd_published_at": "2024-05-02T15:15:07Z", "severity": "MODERATE" }, "details": "A vulnerability was found in Wildfly\u2019s management interface. Due to the lack of limitation of sockets for the management interface, it may be possible to cause a denial of service hitting the nofile limit as there is no possibility to configure or set a maximum number of connections.", "id": "GHSA-x7g6-rwhc-g7mj", "modified": "2024-05-03T20:11:59Z", "published": "2024-05-02T15:30:35Z", "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-4029" }, { "type": "WEB", "url": "https://access.redhat.com/security/cve/CVE-2024-4029" }, { "type": "WEB", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2278615" }, { "type": "PACKAGE", "url": "https://github.com/wildfly/wildfly" } ], "schema_version": "1.4.0", "severity": [ { "score": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H", "type": "CVSS_V3" } ], "summary": "Wildfly vulnerable to denial of service" }
Loading...