CVE-2020-25644
Description
A memory leak flaw was found in WildFly OpenSSL in versions prior to 1.1.3.Final, where it removes an HTTP session. It may allow the attacker to cause OOM leading to a denial of service. The highest threat from this vulnerability is to system availability.
Risk Information
Base Score
7.5
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
0.465
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Multiple Vulnerabilities are affected in Netapp Oncommand Insight 2.3 | Windows |
| Vulnerabilities CVE-2019-10219,CVE-2020-25644 are affected in Red Hat JBoss Data Grid 7.0 | Windows |
| Multiple Vulnerabilities are affected in Red Hat JBoss Enterprise Application Platform 7 7.0.0 | Windows |
| Vulnerabilities CVE-2020-25644,CVE-2020-25711,CVE-2021-3536 are affected in Red Hat Data Grid 8 8.0 | Windows |
| Vulnerabilities CVE-2020-25644,CVE-2020-25711,CVE-2021-3536,CVE-2025-23368 are affected in Red Hat Data Grid 8 8.0 | Windows |
| Multiple Vulnerabilities are affected in Netapp Oncommand Workflow Automation 2.3 | Windows |
| Multiple Vulnerabilities are affected in Red Hat Data Grid 8 8.0 | Windows |
| Vulnerabilities CVE-2020-25644 are fixed in RedHat - wildfly-openssl-natives-parent 1.1.3 | Windows |
| Vulnerabilities CVE-2020-25644 are fixed in RedHat - wildfly-openssl-natives-parent for Linux 1.1.3 | Linux |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234