CVE-2020-27822

A flaw was found in Wildfly affecting versions 19.0.0.Final, 19.1.0.Final, 20.0.0.Final, 20.0.1.Final, and 21.0.0.Final. When an application uses the OpenTracing API's java-interceptors, there is a possibility of a memory leak. This flaw allows an attacker to impact the availability of the server. The highest threat from this vulnerability is to system availability.
References
Link Resource
https://bugzilla.redhat.com/show_bug.cgi?id=1904060 Issue Tracking Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:redhat:wildfly:19.0.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:wildfly:19.1.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:wildfly:20.0.0:*:*:*:*:*:*:*
cpe:2.3:a:redhat:wildfly:20.0.1:*:*:*:*:*:*:*
cpe:2.3:a:redhat:wildfly:21.0.0:*:*:*:*:*:*:*

History

No history.

Information

Published : 2020-12-08 01:15

Updated : 2024-02-28 18:08


NVD link : CVE-2020-27822

Mitre link : CVE-2020-27822

CVE.ORG link : CVE-2020-27822


JSON object : View

Products Affected

redhat

  • wildfly
CWE
CWE-401

Missing Release of Memory after Effective Lifetime