Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2019-14888 →
DEBIAN-CVE-2019-14888
A vulnerability was found in the Undertow HTTP server in versions before 2.0.28.SP1 when listening on HTTPS. An attacker can target the HTTPS port to...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A vulnerability was found in the Undertow HTTP server in versions before 2.0.28.SP1 when listening on HTTPS. An attacker can target the HTTPS port to carry out a Denial Of Service (DOS) to make the service unavailable on SSL.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:14
undertow
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.30-1"}]}]
Références
- advisory security-tracker.debian.org