Oval Definition:
oval:com.ubuntu.cosmic:def:201726700000000
Revision Date
:
2018-07-27
Version
:
1
Title
:
CVE-2017-2670 on Ubuntu 18.10 (cosmic) - medium.
Description
:
It was found in Undertow before 1.3.28 that with non-clean TCP close, the Websocket server gets into infinite loop on every IO thread, effectively causing DoS.
Family
:
unix
Class
:
vulnerability
Status
:
Reference(s)
:
CVE-2017-2670
Platform(s)
:
Ubuntu 18.10
Product(s)
:
Definition Synopsis
Ubuntu 18.10 (cosmic) is installed.
AND
undertow package in cosmic, is related to the CVE in some way and has been fixed (note: '1.4.18-1').
BACK