Skip to content
OpenAdvisories

Package · Ubuntu

undertow

60 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2025-9784 Public exploit

    Undertow: undertow madeyoureset http/2 ddos vulnerability

    A flaw was found in Undertow where malformed client requests can trigger server-side stream resets without triggering abuse counters. This issue, referred to as the "MadeYouReset" attack, allows malicious clients to induce excessive server workload by repeate…

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 10 Linux Debian Ubuntu Wolfi Maven
  • Medium 6.5
    CVE-2017-2666 Public exploit

    Undertow-core vulnerable to HTTP Request Smuggling

    It was discovered in Undertow that the code that parsed the HTTP request line permitted invalid characters. This could be exploited, in conjunction with a proxy that also permitted the invalid characters but with a different interpretation, to inject data int…

    [UNKNOWN] undertow undertow undertow Debian Ubuntu Maven
  • Medium 5.5
    CVE-2018-1047 Public exploit

    Improper Input Validation in org.wildfly:wildfly-undertow

    A flaw was found in Wildfly 9.x. A path traversal vulnerability through the org.wildfly.extension.undertow.deployment.ServletResourceManager.getResource method could lead to information disclosure of arbitrary local files.

    Red Hat wildfly undertow org.wildfly:wildfly-undertow Ubuntu Maven