redhat undertow CVE-2018-1114 vulnerability in Red Hat Products
Published on September 11, 2018

It was found that URLResource.getLastModified() in Undertow closes the file descriptors only when they are finalized which can cause file descriptors to exhaust. This leads to a file handler leak.

Vendor Advisory Vendor Advisory Vendor Advisory NVD

Weakness Type

What is a Resource Exhaustion Vulnerability?

The software does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

CVE-2018-1114 has been classified to as a Resource Exhaustion vulnerability or weakness.


Products Associated with CVE-2018-1114

Want to know whenever a new CVE is published for Red Hat products? stack.watch will email you.

Red Hat Undertow
 
Red Hat Virtualization
 
Red Hat Virtualization Host
 

Affected Versions

Red Hat undertow Version n/a is affected by CVE-2018-1114

Exploit Probability

EPSS
0.71%
Percentile
71.96%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.