vulnti.work

A vulnerability was found in Undertow. This vulnerability impacts a server that supports the wildfly-http-client protocol. Whenever a malicious user opens and closes a connection with the HTTP port o…

High CVSS 7.5
CVECVE-2024-1635
First seen2026-08-04 08:30 UTC
Disclosed2024-02-19 22:15 UTC
Last updated2026-08-04 08:30 UTC
Channel statusauto

Summary

A vulnerability was found in Undertow. This vulnerability impacts a server that supports the wildfly-http-client protocol. Whenever a malicious user opens and closes a connection with the HTTP port of the server and then closes the connection immediately, the server will end with both memory and open file limits exhausted at some point, depending on the amount of memory available. At HTTP upgrade to remoting, the WriteTimeoutStreamSinkConduit leaks connections if RemotingConnection is close…

In-depth triage · Auto channel

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).

Affected products

  • :
  • :

Sources

  • NVD DATABASE

Original Links

Timeline

  1. nvd_ingest NVD