Loop with Unreachable Exit Condition ('Infinite Loop') The advisory has been revoked - it doesn't affect any version of package undertow (opens in a new tab)

Threat Intelligence

1.77% (76^th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk IDSNYK-DEBIAN13-UNDERTOW-5884722
published9 Mar 2023
disclosed14 Sept 2023

Report a new vulnerability Found a mistake?

Introduced: 9 Mar 2023

CVE-2023-1108 (opens in a new tab) CWE-835 (opens in a new tab)

Amendment

The Debian security team deemed this advisory irrelevant for Debian:13.

NVD Description

Note: Versions mentioned in the description apply only to the upstream undertow package and not the undertow package as distributed by Debian.

A flaw was found in undertow. This issue makes achieving a denial of service possible due to an unexpected handshake status updated in SslConduit, where the loop never terminates.