CVE-2016-4993
1 advisory.
Maven/org.wildfly:wildfly-undertow CVE-2016-4993: medium 6.1
Improper Neutralization of CRLF Sequences in Wildfly Undertow
Action: Upgrade org.wildfly:wildfly-undertow to 11.0.0.Final or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 10.0.0.Final | 11.0.0.Final | - |
Fixed versions
| 11.0.0.Final |
Sources
- osv: GHSA-qcqr-hcjq-whfq
- https://nvd.nist.gov/vuln/detail/CVE-2016-4993
- https://github.com/undertow-io/undertow/commit/834496fb74ddda2af197940c70d08bab419fdf12
- https://access.redhat.com/errata/RHSA-2017:3454
- https://access.redhat.com/errata/RHSA-2017:3455
- https://access.redhat.com/errata/RHSA-2017:3456
- https://access.redhat.com/errata/RHSA-2017:3458
- https://bugzilla.redhat.com/show_bug.cgi?id=1344321
- https://issues.redhat.com/browse/UNDERTOW-827
- http://rhn.redhat.com/errata/RHSA-2016-1838.html
- http://rhn.redhat.com/errata/RHSA-2016-1839.html
- http://rhn.redhat.com/errata/RHSA-2016-1840.html
- http://rhn.redhat.com/errata/RHSA-2016-1841.html
CVE-2016-4993 · published · modified · JSON