redhat undertow CVE-2018-14642 vulnerability in Red Hat Products
Published on September 18, 2018

An information leak vulnerability was found in Undertow. If all headers are not written out in the first write() call then the code that handles flushing the buffer will always write out the full contents of the writevBuffer buffer, which may contain data from previous requests.

Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory Vendor Advisory NVD

Weakness Type

What is an Information Disclosure Vulnerability?

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

CVE-2018-14642 has been classified to as an Information Disclosure vulnerability or weakness.


Products Associated with CVE-2018-14642

stack.watch emails you whenever new vulnerabilities are published in Red Hat Undertow or Red Hat Virtualization. Just hit a watch button to start following.

Red Hat Undertow
 
Red Hat Virtualization
 

Affected Versions

Red Hat undertow Version n/a is affected by CVE-2018-14642

Exploit Probability

EPSS
0.75%
Percentile
72.86%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.