Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw was found in Undertow. Servlets using a method that calls HttpServletRequestImpl.getParameterNames() can cause an OutOfMemoryError when the client sends a request with large parameter names. This issue can be exploited by an unauthorized user to cause a remote denial-of-service (DoS) attack.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-01-30 | 2 | Disclosure2 |
| 2026-02-01 | 1 | Disclosure1 |
A denial of service vulnerability (CVE-2024-4027) affects Undertow. Servlets calling getParameterNames() can suffer an OutOfMemoryError with large parameter names. #Undertow #DoS #CVE https://www.pulsepatch.io/posts/cve-2024-4027-undertow-outofmemoryerror
Post summary
CVE-2024-4027 is a denial-of-service vulnerability in Undertow where large parameter names can cause an OutOfMemoryError, as detailed in the PulsePatch article.
CVE-2024-4027 Undertow Servlet DoS Vulnerability via Large Parameter Names Exploitation https://vulmon.com/vulnerabilitydetails?qid=CVE-2024-4027
Post summary
The post announces CVE-2024-4027, a Denial‑of‑Service flaw in Undertow servlets triggered by large parameter names, with details hosted on a vulnerability database.
CVE-2024-4027 A flaw was found in Undertow. Servlets using a method that calls HttpServletRequestImpl.getParameterNames() can cause an OutOfMemoryError when the client sends a reques… https://www.cve.org/CVERecord?id=CVE-2024-4027
Post summary
The post announces CVE‑2024‑4027, a flaw in Undertow that triggers an OutOfMemoryError via HttpServletRequestImpl.getParameterNames(), but contains no PoC, exploit, patch, or evidence of active exploitation.