CVE-2020-25689

Description

A memory leak flaw was found in WildFly in all versions up to 21.0.0.Final, where host-controller tries to reconnect in a loop, generating new connections which are not properly closed while not able to connect to domain-controller. This flaw allows an attacker to cause an Out of memory (OOM) issue, leading to a denial of service. The highest threat from this vulnerability is to system availability.

Risk Information

Base Score

6.5

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS Score

Exploitation Probability

0.238

Associated Vulnerability

Vulnerability	OS Platform
Multiple Vulnerabilities are affected in Netapp Active Iq Unified Manager 2.3	Windows
Multiple Vulnerabilities are affected in Netapp Oncommand Insight 2.3	Windows
Multiple Vulnerabilities are affected in Red Hat JBoss Data Grid 7.0.0	Windows
Multiple Vulnerabilities are affected in Red Hat JBoss Enterprise Application Platform 7 7.0.0	Windows
Vulnerabilities CVE-2020-25689 are fixed in Wildfly - wildfly-dist 21.0.1	Windows
Vulnerabilities CVE-2020-25689 are fixed in Wildfly - wildfly-dist for Linux 21.0.1	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234