Known vulnerabilities in undertow

Known vulnerabilities in undertow

Vendor: openEuler

Software: undertow

Software CPE: cpe:2.3:o:openeuler:undertow:*:*:*:*:*:openeuler:*:*

Website: https://www.openeuler.org/

Total vulnerabilities: 14

Public exploits: 0

Known exploited (KEV): 0

Breakdown by Severity Chart

Vulnerabilities (14)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU122827 - Resource exhaustion CVE-2024-4027	CWE-400	Medium	No	No	1.4.0-10, 1.4.0-11	13.02.2026	SB20260213132 SB20260213134 SB20260213135 and 5 more
#VU119260 - Resource exhaustion CVE-2024-3884	CWE-400	Medium	No	No	1.4.0-10, 1.4.0-11	08.12.2025	SB2025120817 SB2025120926 SB2025120927 and 13 more
#VU112160 - Allocation of Resources Without Limits or Throttling CVE-2023-5379	CWE-770	Medium	No	No	1.4.0-7	03.07.2025	SB20231212125 SB2025070404 SB20241108113
#VU101669 - Resource Management Errors CVE-2024-4109	CWE-399	Medium	No	No	1.4.0-8	11.12.2024	SB2024121157 SB2024122040
#VU88156 - Resource exhaustion CVE-2023-1973	CWE-400	Medium	No	No	1.4.0-7	04.04.2024	SB2024040460 SB2024040537 SB2024040538 and 5 more
#VU73219 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2023-1108	CWE-835	Medium	No	No	1.4.0-5	10.03.2023	SB2023031005 SB2023031008 SB2023031009 and 15 more
#VU56025 - Missing release of memory after effective lifetime CVE-2021-3690	CWE-401	Medium	No	No	1.4.0-7	22.08.2021	SB2021082203 SB2022042263 SB2021121542 and 1 more
#VU51519 - Missing release of memory after effective lifetime CVE-2020-10705	CWE-401	Medium	No	No	1.4.0-4	17.03.2021	SB2020061075 SB2021110530
#VU48779 - Resource Management Errors CVE-2020-17527	CWE-399	Medium	No	No	1.4.0-8	03.12.2020	SB2020120401 SB2020120509 SB2020120510 and 21 more
#VU28497 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2020-10719	CWE-444	Medium	No	No	1.4.0-4	02.06.2020	SB2020060201 SB2021110530
#VU21469 - Information Exposure Through Log Files CVE-2019-10212	CWE-532	Low	No	No	1.4.0-10	01.10.2019	SB2019100116 SB2019100117 SB2019100118 and 4 more
#VU20067 - Exposure of sensitive information to an unauthorized actor CVE-2019-10184	CWE-200	Low	No	No	1.4.0-10	13.08.2019	SB2019100116 SB2019100117 SB2019100118 and 4 more
#VU20066 - Cleartext Storage of Sensitive Information CVE-2019-3888	CWE-312	Low	No	No	1.4.0-4	13.08.2019	SB2019081308 SB2019101007 SB2020032701 and 1 more
#VU12802 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle') CVE-2017-12196	CWE-300	Low	No	No	1.4.0-10	17.05.2018	SB2018051725 SB2018031234 SB2025030774