This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2019-14888 →

DEBIAN-CVE-2019-14888

A vulnerability was found in the Undertow HTTP server in versions before 2.0.28.SP1 when listening on HTTPS. An attacker can target the HTTPS port to...

Original description

The description as published by the source.

A vulnerability was found in the Undertow HTTP server in versions before 2.0.28.SP1 when listening on HTTPS. An attacker can target the HTTPS port to carry out a Denial Of Service (DOS) to make the service unavailable on SSL.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:14 undertow

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.30-1"}]}]

References

advisory security-tracker.debian.org