CyberRota Analysis
AI-GeneratedA vulnerability in Undertow allows remote attackers to exploit the PerMessageDeflateFunction.largerBuffer() method by sending specially crafted WebSocket messages, leading to excessive memory consumption. This can result in a Denial of Service (DoS) for the affected application, making it critical for organizations using Undertow to prioritize mitigation efforts. System administrators and security teams should assess their environments for this flaw to prevent potential service disruptions.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw was found in Undertow. A remote attacker could exploit this vulnerability by sending specially crafted WebSocket messages with permessage-deflate negotiated. This could lead to excessive memory consumption due to the PerMessageDeflateFunction.largerBuffer() method using exponential doubling, resulting in a Denial of Service (DoS) for the affected application.