Vulnetix
Try Vulnetix Request Demo
CVE-2020-10705 PUBLISHED

A flaw was discovered in Undertow in versions before Undertow 2.1.1.Final where certain requests to the "Expect: 100-continue" header may cause an out of memory error. This flaw may potentially lead to a denial of service.

EPSS 0.30% · 53.1th percentile

Risk Scores

EPSS Score
0.30%
53.1th percentile

Affected Products

VendorProductVersions
Ubuntu:24.04:LTSundertow0, 2.3.8-2
Ubuntu:25.10undertow2.3.18-2, 2.3.18-1, 0
Ubuntu:20.04:LTSundertow2.0.23-1, 0, 2.0.27-1
Ubuntu:16.04:LTSundertow1.3.5-1, 1.3.4-1, 1.3.16-1
Ubuntu:18.04:LTSundertow1.4.23-1, 1.4.23-2build1, 1.4.23-3
Ubuntu:22.04:LTSundertow2.2.16-1, 0, 2.2.8-1

Timeline

References

Open in Interactive Console →