Source |
CVE Liste |
Identifiant |
2869022 |
Date de publication |
2021-06-02 14:15:09 (vue: 2021-06-02 18:05:42) |
Titre |
CVE-2020-35510 |
Texte |
A flaw was found in jboss-remoting in versions before 5.0.20.SP1-redhat-00001. A malicious attacker could cause threads to hold up forever in the EJB server by writing a sequence of bytes corresponding to the expected messages of a successful EJB client request, but omitting the ACK messages, or just tamper with jboss-remoting code, deleting the lines that send the ACK message from the EJB client code resulting in a denial of service. The highest threat from this vulnerability is to system availability. |
Notes |
|
Envoyé |
Oui |
Condensat |
00001 2020 35510 ack attacker availability before but bytes cause client code corresponding could cve deleting denial ejb expected flaw forever found from highest hold jboss just lines malicious message messages omitting redhat remoting request resulting send sequence server service sp1 successful system tamper threads threat versions vulnerability writing |
Tags |
Vulnerability
Threat
|
Stories |
|
Move |
|