High severity7.5NVD Advisory· Published Dec 27, 2023· Updated Jun 17, 2026
CVE-2023-3171
CVE-2023-3171
Description
A flaw was found in EAP-7 during deserialization of certain classes, which permits instantiation of HashMap and HashTable with no checks on resources consumed. This issue could allow an attacker to submit malicious requests using these classes, which could eventually exhaust the heap and result in a Denial of Service.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
7- Red Hat/EAP 7.4.13v5cpe:/a:redhat:jboss_enterprise_application_platform:7.4
cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el7+ 4 more
- cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el7range: 0:1.15.20-1.Final_redhat_00001.1.el7eap
- cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el8range: 0:1.15.20-1.Final_redhat_00001.1.el8eap
- cpe:/a:redhat:jboss_enterprise_application_platform:7.4::el9range: 0:1.15.20-1.Final_redhat_00001.1.el9eap
- cpe:2.3:a:redhat:jboss_enterprise_application_platform:-:*:*:*:text-only:*:*:*
- cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.4:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
6- access.redhat.com/errata/RHSA-2023:5484nvdVendor Advisory
- access.redhat.com/errata/RHSA-2023:5485nvdVendor Advisory
- access.redhat.com/errata/RHSA-2023:5486nvdVendor Advisory
- access.redhat.com/errata/RHSA-2023:5488nvdVendor Advisory
- access.redhat.com/security/cve/CVE-2023-3171nvdVendor Advisory
- bugzilla.redhat.com/show_bug.cginvdIssue Tracking
News mentions
0No linked articles in our index yet.