GHSA-37g7-8vjj-pjpj
RESTEasy 4.5.5.Final in hash flooding
At a glance
- Published
- Updated
- CVE
- CVE-2020-14326
- CVSS_V3
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description
A vulnerability was found in RESTEasy, where RootNode incorrectly caches routes. This issue results in hash flooding, leading to slower requests with higher CPU time spent searching and adding the entry. This flaw allows an attacker to cause a denial of service.
Affected packages
| Package | Versions |
|---|---|
| Maven · org.jboss.resteasy:resteasy-bom | introduced 0, fixed 4.5.6.Final |
References
- https://nvd.nist.gov/vuln/detail/CVE-2020-14326 ADVISORY
- https://github.com/resteasy/Resteasy/pull/2471 WEB
- https://bugzilla.redhat.com/show_bug.cgi?id=1855826 WEB
- https://github.com/resteasy/Resteasy PACKAGE
- https://security.netapp.com/advisory/ntap-20210713-0001 WEB
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — GitHub Advisory Database |