High severity7.5GHSA Advisory· Published Nov 7, 2024· Updated Apr 15, 2026
CVE-2023-1973
CVE-2023-1973
Description
A flaw was found in Undertow package. Using the FormAuthenticationMechanism, a malicious user could trigger a Denial of Service by sending crafted requests, leading the server to an OutofMemory error, exhausting the server's memory.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
io.undertow:undertow-coreMaven | < 2.2.32.Final | 2.2.32.Final |
io.undertow:undertow-coreMaven | >= 2.3.0.Alpha1, < 2.3.13.Final | 2.3.13.Final |
Affected products
3- Range: >= 2.3.0.Alpha1, < 2.3.13.Final
- osv-coords2 versions
< 2.3.18-1+ 1 more
- (no CPE)range: < 2.3.18-1
- (no CPE)range: < 2.2.32.Final
Patches
Vulnerability mechanics
References
12- github.com/advisories/GHSA-97cq-f4jm-mv8hghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2023-1973ghsaADVISORY
- access.redhat.com/errata/RHSA-2024:1674nvdWEB
- access.redhat.com/errata/RHSA-2024:1675nvdWEB
- access.redhat.com/errata/RHSA-2024:1676nvdWEB
- access.redhat.com/errata/RHSA-2024:1677nvdWEB
- access.redhat.com/errata/RHSA-2024:2763nvdWEB
- access.redhat.com/errata/RHSA-2024:2764nvdWEB
- access.redhat.com/security/cve/CVE-2023-1973nvdWEB
- bugzilla.redhat.com/show_bug.cginvdWEB
- github.com/undertow-io/undertow/commit/0410f3c4d9b39b754a2203a29834cac51da11258ghsaWEB
- github.com/undertow-io/undertow/commit/b289b18bc0ba40c134698a430c70ca1835c51d78ghsaWEB
News mentions
0No linked articles in our index yet.