VYPR
← All advisories
High severity7.5NVD Advisory· Published Mar 12, 2018· Updated Jun 17, 2026

CVE-2016-9589

CVE-2016-9589

Description

Undertow in Red Hat wildfly before version 11.0.0.Beta1 is vulnerable to a resource exhaustion resulting in a denial of service. Undertow keeps a cache of seen HTTP headers in persistent connections. It was found that this cache can easily exploited to fill memory with garbage, up to "max-headers" (default 200) * "max-header-size" (default 1MB) per active TCP connection.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
org.wildfly:wildfly-undertowMaven
< 11.0.0.Beta111.0.0.Beta1

Affected products

4
  • Red Hat/Jboss Wildfly Application Server2 versions
    cpe:2.3:a:redhat:jboss_wildfly_application_server:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:redhat:jboss_wildfly_application_server:*:*:*:*:*:*:*:*range: <=10.1.0
    • cpe:2.3:a:redhat:jboss_wildfly_application_server:11.0.0:alpha1:*:*:*:*:*:*
  • ghsa-coords
    pkg:maven/org.wildfly/wildfly-undertow
    Range: < 11.0.0.Beta1
  • Red Hat, Inc./wildflyv5
    Range: 11.0.0.Beta1

Patches

Vulnerability mechanics

References

16

News mentions

0

No linked articles in our index yet.