Uploaded image for project: 'Undertow'
  1. Undertow
  2. UNDERTOW-2413

CVE-2024-5971 undertow: response write hangs in case of Java 17 TLSv1.3 NewSessionTicket

XMLWordPrintable

    Bug in SSLConduit can prevent last chunk bytes from being written and also may cause some loops.
    Requires JDK17 or newer.

    Severity: High

            flaviarnn Flavia Rainone
            flaviarnn Flavia Rainone
            Alessio Soldano, Bartosz Baranowski, Brad Maxwell, Brian Stansberry, Carlo de Wolf, Chao Wang, Daniel Kreling, Darran Lofthouse, Farah Juma, Flavia Rainone, Ilia Vassilev, Ingo Weiss, Jason Lee, Lin Gao, Martin Stefanko (Inactive), Masafumi Miura, Michaela Osmerova, Miroslav Sochurek, Neil Wallace, Paramvir Jindal, Peter Mackay, Radovan Stancel, Richard Opalka, Stefano Maestri, Tom Jenkinson, Vladimir Dosoudil
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved: