Record status Published
Identifier year (not publication year) 2023
Source publication Dec 12, 2023
Source updated Aug 4, 2026
Imported by cveboard Oct 24, 2026
CNA source text (English) Undertow: ajp request closes connection exceeding maxrequestsize
A flaw was found in Undertow. When an AJP request is sent that exceeds the max-header-size attribute in ajp-listener, JBoss EAP is marked in an error state by mod_cluster in httpd, causing JBoss EAP to close the TCP connection without returning an AJP response. This happens because mod_proxy_cluster marks the JBoss EAP instance as an error worker when the TCP connection is closed from the backend after sending the AJP request without receiving an AJP response, and stops forwarding. This issue could allow a malicious user could to repeatedly send requests that exceed the max-header-size, causing a Denial of Service (DoS).
Scoped product and version facts Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7
Platforms Unknown
Default status affected
Package eap7-glassfish-el
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:3.0.1-4.b08_redhat_00005.1.ep7.el7 unaffectedrpm * Unavailable None listed
Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7
Platforms Unknown
Default status affected
Package eap7-hibernate
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:5.1.17-3.Final_redhat_00004.1.ep7.el7 unaffectedrpm * Unavailable None listed
Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7
Platforms Unknown
Default status affected
Package eap7-jackson-databind
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:2.8.11.6-3.SP1_redhat_00003.1.ep7.el7 unaffectedrpm * Unavailable None listed
Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7
Platforms Unknown
Default status affected
Package eap7-jboss-ejb-client
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:4.0.12-1.Final_redhat_00002.1.ep7.el7 unaffectedrpm * Unavailable None listed
Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7
Platforms Unknown
Default status affected
Package eap7-netty
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:4.1.63-2.Final_redhat_00003.1.ep7.el7 unaffectedrpm * Unavailable None listed
Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7
Platforms Unknown
Default status affected
Package eap7-undertow
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:1.4.18-16.SP14_redhat_00001.1.ep7.el7 unaffectedrpm * Unavailable None listed
Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7
Platforms Unknown
Default status affected
Package eap7-wildfly
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:7.1.11-4.GA_redhat_00002.1.ep7.el7 unaffectedrpm * Unavailable None listed
Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7
Platforms Unknown
Default status affected
Package eap7-wildfly-elytron
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:1.1.14-1.Final_redhat_00001.1.ep7.el7 unaffectedrpm * Unavailable None listed
Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7
Platforms Unknown
Default status affected
Package eap7-wildfly-http-client
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:1.0.21-1.Final_redhat_00001.1.ep7.el7 unaffectedrpm * Unavailable None listed
Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7
Platforms Unknown
Default status affected
Package eap7-wildfly-naming-client
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:1.0.13-1.Final_redhat_00001.1.ep7.el7 unaffectedrpm * Unavailable None listed
Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7
Platforms Unknown
Default status affected
Package eap7-wildfly-openssl
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:1.0.12-1.Final_redhat_00001.1.ep7.el7 unaffectedrpm * Unavailable None listed
Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7
Platforms Unknown
Default status affected
Package eap7-wildfly-openssl-linux
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:1.0.12-6.Final_redhat_00001.1.ep7.el7 unaffectedrpm * Unavailable None listed
Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7
Platforms Unknown
Default status affected
Package eap7-jackson-annotations
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:2.10.4-3.redhat_00006.1.el7eap unaffectedrpm * Unavailable None listed
Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7
Platforms Unknown
Default status affected
Package eap7-jackson-core
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:2.10.4-3.redhat_00006.1.el7eap unaffectedrpm * Unavailable None listed
Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7
Platforms Unknown
Default status affected
Package eap7-jackson-databind
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:2.10.4-5.redhat_00006.1.el7eap unaffectedrpm * Unavailable None listed
Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7
Platforms Unknown
Default status affected
Package eap7-jackson-jaxrs-providers
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:2.10.4-3.redhat_00006.1.el7eap unaffectedrpm * Unavailable None listed
Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7
Platforms Unknown
Default status affected
Package eap7-jackson-modules-base
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:2.10.4-5.redhat_00006.1.el7eap unaffectedrpm * Unavailable None listed
Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7
Platforms Unknown
Default status affected
Package eap7-jackson-modules-java8
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:2.10.4-2.redhat_00006.1.el7eap unaffectedrpm * Unavailable None listed
Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7
Platforms Unknown
Default status affected
Package eap7-jboss-server-migration
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:1.7.2-16.Final_redhat_00017.1.el7eap unaffectedrpm * Unavailable None listed
Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7
Platforms Unknown
Default status affected
Package eap7-netty
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:4.1.63-5.Final_redhat_00003.1.el7eap unaffectedrpm * Unavailable None listed
Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7
Platforms Unknown
Default status affected
Package eap7-undertow
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:2.0.41-4.SP5_redhat_00001.1.el7eap unaffectedrpm * Unavailable None listed
Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7
Platforms Unknown
Default status affected
Package eap7-wildfly
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:7.3.14-3.GA_redhat_00002.1.el7eap unaffectedrpm * Unavailable None listed
Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7
Platforms Unknown
Default status affected
Package eap7-wildfly-elytron
Package collection https://access.redhat.com/downloads/content/package-browser/
Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) 0:1.10.17-1.Final_redhat_00001.1.el7eap unaffectedrpm * Unavailable None listed
Red Hat build of Quarkus
Vendor Red Hat
Product Red Hat build of Quarkus
Platforms Unknown
Default status unaffected
Package quarkus-undertow
Package collection https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Data Grid 8
Vendor Red Hat
Product Red Hat Data Grid 8
Platforms Unknown
Default status unaffected
Package undertow
Package collection https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Decision Manager 7
Vendor Red Hat
Product Red Hat Decision Manager 7
Platforms Unknown
Default status unknown
Package undertow
Package collection https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Fuse 7
Vendor Red Hat
Product Red Hat Fuse 7
Platforms Unknown
Default status unknown
Package undertow
Package collection https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat JBoss Data Grid 7
Vendor Red Hat
Product Red Hat JBoss Data Grid 7
Platforms Unknown
Default status unknown
Package undertow
Package collection https://access.redhat.com/jbossnetwork/restricted/listSoftware.html
No explicit version tuples; consult this entry's default status.
Red Hat JBoss Enterprise Application Platform 7
Vendor Red Hat
Product Red Hat JBoss Enterprise Application Platform 7
Platforms Unknown
Default status affected
Package undertow
Package collection https://access.redhat.com/jbossnetwork/restricted/listSoftware.html
No explicit version tuples; consult this entry's default status.
Red Hat JBoss Fuse 6
Vendor Red Hat
Product Red Hat JBoss Fuse 6
Platforms Unknown
Default status unknown
Package undertow
Package collection https://access.redhat.com/jbossnetwork/restricted/listSoftware.html
No explicit version tuples; consult this entry's default status.
Red Hat Process Automation 7
Vendor Red Hat
Product Red Hat Process Automation 7
Platforms Unknown
Default status unknown
Package undertow
Package collection https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat Single Sign-On 7
Vendor Red Hat
Product Red Hat Single Sign-On 7
Platforms Unknown
Default status affected
Package undertow
Package collection https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.
Red Hat support for Spring Boot
Vendor Red Hat
Product Red Hat support for Spring Boot
Platforms Unknown
Default status unaffected
Package undertow
Package collection https://access.redhat.com/downloads/content/package-browser/
No explicit version tuples; consult this entry's default status.