CVE - CVE-2022-1319

CVE-ID
CVE-2022-1319	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
A flaw was found in Undertow. For an AJP 400 response, EAP 7 is improperly sending two response packets, and those packets have the reuse flag set even though JBoss EAP closes the connection. A failure occurs when the connection is reused after a 400 by CPING since it reads in the second SEND_HEADERS response packet instead of a CPONG.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://access.redhat.com/security/cve/CVE-2022-1319 URL:https://access.redhat.com/security/cve/CVE-2022-1319 MISC:https://bugzilla.redhat.com/show_bug.cgi?id=2073890 URL:https://bugzilla.redhat.com/show_bug.cgi?id=2073890 MISC:https://github.com/undertow-io/undertow/commit/1443a1a2bbb8e32e56788109d8285db250d55c8b URL:https://github.com/undertow-io/undertow/commit/1443a1a2bbb8e32e56788109d8285db250d55c8b MISC:https://github.com/undertow-io/undertow/commit/7c5b3ab885b5638fd3f1e8a935d5063d68aa2df3 URL:https://github.com/undertow-io/undertow/commit/7c5b3ab885b5638fd3f1e8a935d5063d68aa2df3 MISC:https://issues.redhat.com/browse/UNDERTOW-2060 URL:https://issues.redhat.com/browse/UNDERTOW-2060 MISC:https://security.netapp.com/advisory/ntap-20221014-0006/ URL:https://security.netapp.com/advisory/ntap-20221014-0006/
Assigning CNA
Red Hat, Inc.
Date Record Created
20220412	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20220412)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)