CVE-2023-1973: Undertow Denial of Service vulnerability
A flaw was found in Undertow package. Using the FormAuthenticationMechanism, a malicious user could trigger a Denial of Service by sending crafted requests, leading the server to an OutofMemory error, exhausting the server’s memory.
References
- access.redhat.com/errata/RHSA-2024:1674
- access.redhat.com/errata/RHSA-2024:1675
- access.redhat.com/errata/RHSA-2024:1676
- access.redhat.com/errata/RHSA-2024:1677
- access.redhat.com/errata/RHSA-2024:2763
- access.redhat.com/errata/RHSA-2024:2764
- access.redhat.com/security/cve/CVE-2023-1973
- bugzilla.redhat.com/show_bug.cgi?id=2185662
- github.com/advisories/GHSA-97cq-f4jm-mv8h
- github.com/undertow-io/undertow
- github.com/undertow-io/undertow/commit/0410f3c4d9b39b754a2203a29834cac51da11258
- github.com/undertow-io/undertow/commit/b289b18bc0ba40c134698a430c70ca1835c51d78
- nvd.nist.gov/vuln/detail/CVE-2023-1973
Code Behaviors & Features
Detect and mitigate CVE-2023-1973 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →