CVE-2020-27822: Missing Release of Memory after Effective Lifetime

May 24, 2022 (updated July 13, 2023)

A flaw was found in Wildfly affecting versions 19.0.0.Final, 19.1.0.Final, 20.0.0.Final, 20.0.1.Final, and 21.0.0.Final. When an application uses the OpenTracing API’s java-interceptors, there is a possibility of a memory leak. This flaw allows an attacker to impact the availability of the server. The highest threat from this vulnerability is to system availability.

References

bugzilla.redhat.com/show_bug.cgi?id=1904060
github.com/advisories/GHSA-qx3p-9mmp-4v8h
nvd.nist.gov/vuln/detail/CVE-2020-27822

Code Behaviors & Features

Detect and mitigate CVE-2020-27822 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →