CVE-2024-3653

MEDIUM

Undertow 2.3.0.Alpha1-2.3.15.Final - Use-After-Free in Learning-Push Handler

Title source: llm
STIX 2.1

Description

A vulnerability was found in Undertow. This issue requires enabling the learning-push handler in the server's config, which is disabled by default, leaving the maxAge config in the handler unconfigured. The default is -1, which makes the handler vulnerable. If someone overwrites that config, the server is not subject to the attack. The attacker needs to be able to reach the server with a normal HTTP request.

References (9)

Core 9
Core References
Issue Tracking issue-tracking x_refsource_redhat
https://bugzilla.redhat.com/show_bug.cgi?id=2274437
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2024:4392
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2024:5143
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2024:5144
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2024:5145
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2024:5147
Vendor Advisory vendor-advisory x_refsource_redhat
https://access.redhat.com/errata/RHSA-2024:6437
Vendor Advisory vdb-entry x_refsource_redhat
https://access.redhat.com/security/cve/CVE-2024-3653

Scores

CVSS v3 5.3
EPSS 0.0443
EPSS Percentile 89.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-401
Status published
Products (25)
io.undertow/undertow-core 2.3.0.Alpha1 - 2.3.15.FinalMaven
Red Hat/OpenShift Serverless
Red Hat/Red Hat build of Apache Camel - HawtIO 4
Red Hat/Red Hat build of Apache Camel 4 for Quarkus 3
Red Hat/Red Hat build of Apache Camel for Spring Boot 4
Red Hat/Red Hat build of Apicurio Registry 2
Red Hat/Red Hat Build of Keycloak
Red Hat/Red Hat build of OptaPlanner 8
Red Hat/Red Hat build of Quarkus
Red Hat/Red Hat build of Quarkus 3.8.6.redhat 5.2.4.redhat-00001
... and 15 more
Published Jul 08, 2024
Tracked Since Feb 18, 2026