Undertow: outofmemory when parsing form data encoding with application/x-www-form-urlencoded
A flaw was found in Undertow that can cause remote denial of service attacks. When the server uses the FormEncodedDataDefinition.doParse(StreamSourceChannel) method to parse large form data encoding with application/x-www-form-urlencoded, the method will cause an OutOfMemory issue. This flaw allows unauthorized users to cause a remote denial of service (DoS) attack.
Evidence and details
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2024-3884
Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7
Source reference: /containers/cna/affected/1/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7
Source reference: /containers/cna/affected/2/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7
Source reference: /containers/cna/affected/3/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat JBoss Enterprise Application Platform 7.4.24
Source reference: /containers/cna/affected/4/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
Source reference: /containers/cna/affected/5/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 7
Source reference: /containers/cna/affected/6/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8
Source reference: /containers/cna/affected/7/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 8
Source reference: /containers/cna/affected/8/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9
Source reference: /containers/cna/affected/9/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat JBoss Enterprise Application Platform 7.4 ELS on RHEL 9
Source reference: /containers/cna/affected/10/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat JBoss Enterprise Application Platform 8.0
Source reference: /containers/cna/affected/11/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
Source reference: /containers/cna/affected/12/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
Source reference: /containers/cna/affected/13/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
Source reference: /containers/cna/affected/14/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
Source reference: /containers/cna/affected/15/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
Source reference: /containers/cna/affected/16/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8
Source reference: /containers/cna/affected/17/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
Source reference: /containers/cna/affected/18/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
Source reference: /containers/cna/affected/19/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
Source reference: /containers/cna/affected/20/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
Source reference: /containers/cna/affected/21/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
Source reference: /containers/cna/affected/22/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9
Source reference: /containers/cna/affected/23/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat JBoss Enterprise Application Platform 8.1.3
Source reference: /containers/cna/affected/24/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8
Source reference: /containers/cna/affected/25/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8
Source reference: /containers/cna/affected/26/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8
Source reference: /containers/cna/affected/27/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8
Source reference: /containers/cna/affected/28/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8
Source reference: /containers/cna/affected/29/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8
Source reference: /containers/cna/affected/30/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8
Source reference: /containers/cna/affected/31/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8
Source reference: /containers/cna/affected/32/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8
Source reference: /containers/cna/affected/33/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8
Source reference: /containers/cna/affected/34/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8
Source reference: /containers/cna/affected/35/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 8
Source reference: /containers/cna/affected/36/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9
Source reference: /containers/cna/affected/37/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9
Source reference: /containers/cna/affected/38/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9
Source reference: /containers/cna/affected/39/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9
Source reference: /containers/cna/affected/40/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9
Source reference: /containers/cna/affected/41/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9
Source reference: /containers/cna/affected/42/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9
Source reference: /containers/cna/affected/43/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9
Source reference: /containers/cna/affected/44/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9
Source reference: /containers/cna/affected/45/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9
Source reference: /containers/cna/affected/46/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9
Source reference: /containers/cna/affected/47/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat JBoss Enterprise Application Platform 8.1 for RHEL 9
Source reference: /containers/cna/affected/48/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
OpenShift Serverless
Source reference: /containers/cna/affected/49/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat build of Apache Camel 4 for Quarkus 3
Source reference: /containers/cna/affected/50/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat build of Apache Camel for Spring Boot 3
Source reference: /containers/cna/affected/51/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat build of Apache Camel for Spring Boot 4
Source reference: /containers/cna/affected/52/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat build of Apache Camel - HawtIO 4
Source reference: /containers/cna/affected/53/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat build of Apicurio Registry 2
Source reference: /containers/cna/affected/54/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat Build of Keycloak
Source reference: /containers/cna/affected/55/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat build of OptaPlanner 8
Source reference: /containers/cna/affected/56/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat build of Quarkus
Source reference: /containers/cna/affected/57/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat build of Quarkus
Source reference: /containers/cna/affected/58/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat Data Grid 8
Source reference: /containers/cna/affected/59/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat Fuse 7
Source reference: /containers/cna/affected/60/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat Integration Camel K 1
Source reference: /containers/cna/affected/61/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat Integration Camel Quarkus 2
Source reference: /containers/cna/affected/62/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat JBoss Data Grid 7
Source reference: /containers/cna/affected/63/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat JBoss Enterprise Application Platform 7
Source reference: /containers/cna/affected/64/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat JBoss Enterprise Application Platform Expansion Pack
Source reference: /containers/cna/affected/65/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat JBoss Fuse Service Works 6
Source reference: /containers/cna/affected/66/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat Process Automation 7
Source reference: /containers/cna/affected/67/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat Single Sign-On 7
Source reference: /containers/cna/affected/68/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
streams for Apache Kafka
Source reference: /containers/cna/affected/69/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
- Related CVEs
- CVE-2024-3884
Source reference:
/cveMetadata/cveId
Publisher severity
No explicit severity was provided.