CVE-2024-3884Patch

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A flaw was found in Undertow that can cause remote denial of service attacks. When the server uses the FormEncodedDataDefinition.doParse(StreamSourceChannel) method to parse large form data encoding with application/x-www-form-urlencoded, the method will cause an OutOfMemory issue. This flaw allows unauthorized users to cause a remote denial of service (DoS) attack.

Back to dashboard

0.5/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-20

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

Patch or workaround signal is available
1 mentions across 1 observed day

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 1 signal
1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Patch

1100.0%

Referenced assets1 URL

By indicator

https://www.pulsepatch.io/posts/cve-2024-3884-undertow-outofmemory

Full discourse1 post

PulsePatch.io@pulsepatchio203d
Patch
An OutOfMemory vulnerability (CVE-2024-3884) affects `Undertow` when parsing `x-www-form-urlencoded` data, leading to denial of service. Monitor official channels for patch information. #Undertow #DoS #infosec https://www.pulsepatch.io/posts/cve-2024-3884-undertow-outofmemory
Post summary
CVE‑2024‑3884 is an OutOfMemory bug in Undertow that can trigger DoS when processing form data; users are urged to monitor official sources for a patch.
0000051
1 followersView on X

Explore more

Back to dashboard