CyberRota Analysis
AI-GeneratedA vulnerability in Undertow allows remote attackers to exploit any @ServerEndpoint class with an @OnMessage method, leading to an Out of Memory condition on WebSocket endpoints without requiring authentication. This can result in a Denial of Service (DoS) attack, making the affected systems unavailable to legitimate users. Organizations utilizing Undertow for WebSocket communications should prioritize patching this vulnerability to mitigate potential service disruptions.
Original NVD Description
A flaw was found in Undertow. A remote attacker can cause Out of Memory on websockets endpoint without authentication on any @ServerEndpoint class that has any @OnMessage method. This allows an attacker to cause Denial of Service attack without authentication and using only a standard WebSocket handshake.