CVE-2025-9784
HIGHRedhat Build OF Apache Camel For Spri... - Improper Resource Release
Title source: ruleDescription
A flaw was found in Undertow where malformed client requests can trigger server-side stream resets without triggering abuse counters. This issue, referred to as the "MadeYouReset" attack, allows malicious clients to induce excessive server workload by repeatedly causing server-side stream aborts. While not a protocol bug, this highlights a common implementation weakness that can be exploited to cause a denial of service (DoS).
Exploits (1)
References (14)
Scores
CVSS v3
7.5
EPSS
0.0117
EPSS Percentile
78.4%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Classification
CWE
CWE-404
CWE-770
Status
published
Affected Products (11)
redhat/build_of_apache_camel_for_spring_boot
redhat/fuse
redhat/jboss_enterprise_application_platform
redhat/jboss_enterprise_application_platform
redhat/jboss_enterprise_application_platform_expansion_pack
redhat/process_automation
redhat/single_sign-on
redhat/undertow
redhat/enterprise_linux
redhat/enterprise_linux
io.undertow/undertow-core
< 2.2.38.FinalMaven
Timeline
Published
Sep 02, 2025
Tracked Since
Feb 18, 2026