Vulnetix
Try Vulnetix Request Demo
CVE-2018-14642 PUBLISHED

An information leak vulnerability was found in Undertow. If all headers are not written out in the first write() call then the code that handles flushing the buffer will always write out the full contents of the writevBuffer buffer, which may contain data from previous requests.

EPSS 0.75% · 72.9th percentile

Risk Scores

EPSS Score
0.75%
72.9th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSundertow1.3.7-1, 1.3.4-1, 1.3.5-1
Ubuntu:20.04:LTSundertow0
Ubuntu:25.10undertow2.3.18-2, 0, 2.3.18-1
Ubuntu:18.04:LTSundertow1.4.23-1, 1.4.23-2build1, 1.4.23-3
Ubuntu:24.04:LTSundertow0, 2.3.8-2

Timeline

References

Open in Interactive Console →