Read the docs
TI-2018-10505 Aliases CVE-2018-14642GHSA-vf6r-mmhc-3xcm

Information disclosure in Red Hat undertow

Priority LOW 28CWE-200Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
Low · None · None
Fix status
Partial Red Hat: 9 fixed, 4 without a fix

Attack profile from CVSS 3.1 · NVD. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-200.

Summary

An information leak vulnerability was found in Undertow. If all headers are not written out in the first write() call then the code that handles flushing the buffer will always write out the full contents of the writevBuffer buffer, which may contain data from previous requests.

Why it matters now

EPSS 0.02114 81st percentileScored 2026-11-07
Fix Partial io.undertow:undertow-core (Maven): 2.0.19.FINALRed Hat: 7 advisoriesRed Hat: 9 fixed, 4 without a fix

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
Red Hatundertowall versions—No fix listedCNA
—io.undertow:undertow-core (Maven)before 2.0.19.FINAL2.0.19.FINALPatch availableGHSA-vf6r-mmhc-3xcm
  • undertow VendorRed Hat Affected all versions Fixed in — No fix listed CNA
  • io.undertow:undertow-core (Maven) Vendor— Affected before 2.0.19.FINAL Fixed in 2.0.19.FINAL Patch available GHSA-vf6r-mmhc-3xcm

CPE configurations NVD · 6

CPEVersionsRoleVendor
cpe:2.3:a:redhat:undertow:-:*:*:*:*:*:*:*not specified by NVDVulnerableRed Hat
cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.1:*:*:*:*:*:*:*7.1VulnerableRed Hat
cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.2:*:*:*:*:*:*:*7.2VulnerableRed Hat
cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.3:*:*:*:*:*:*:*7.3VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*6.0Running onRed Hat
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*7.0Running onRed Hat
  • cpe:2.3:a:redhat:undertow:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.1:*:*:*:*:*:*:* Versions 7.1 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.2:*:*:*:*:*:*:* Versions 7.2 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.3:*:*:*:*:*:*:* Versions 7.3 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:* Versions 6.0 Running on ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* Versions 7.0 Running on ·Red Hat

Remediation

  • Fix · GHSA-vf6r-mmhc-3xcm io.undertow:undertow-core (Maven) Fixed in 2.0.19.FINAL Advisory →

Red Hat 7 advisories

  • RHSA-2019:1140 Released 2019-05-09 · Red Hat rating Important
    Red Hat Single Sign-On 7.3.1 security update
    • Red Hat Single Sign-On 7.3.1 zip
  • RHSA-2019:1108 Released 2019-05-08 · Red Hat rating Important
    Red Hat JBoss Enterprise Application Platform 7.2.1 on RHEL 7 security update
    • Red Hat JBoss EAP 7.2 for RHEL 7 Server eap7-activemq-artemis-2.6.3-5.redhat_00020.1.el7eap, eap7-activemq-artemis-cli-2.6.3-5.redhat_00020.1.el7eap, eap7-activemq-artemis-commons-2.6.3-5.redhat_00020.1.el7eap +47
  • RHSA-2019:1107 Released 2019-05-08 · Red Hat rating Important
    Red Hat JBoss Enterprise Application Platform 7.2.1 on RHEL 6 security update
    • Red Hat JBoss EAP 7.2 for RHEL 6 Server eap7-activemq-artemis-2.6.3-5.redhat_00020.1.el6eap, eap7-activemq-artemis-cli-2.6.3-5.redhat_00020.1.el6eap, eap7-activemq-artemis-commons-2.6.3-5.redhat_00020.1.el6eap +47
Show 4 more Red Hat advisories
  • RHSA-2019:1106 Released 2019-05-08 · Red Hat rating Important
    Red Hat JBoss Enterprise Application Platform 7.2.1 security update
    • Red Hat JBoss EAP 7.2
  • RHSA-2019:0380 Released 2019-02-19 · Red Hat rating Moderate
    Red Hat Single Sign-On 7.2.6 security update
    • Red Hat Single Sign-On 7.2.6 zip
  • RHSA-2019:0364 Released 2019-02-18 · Red Hat rating Moderate
    Red Hat JBoss Enterprise Application Platform 7.1.6 on RHEL 6 security update
    • Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 Server eap7-activemq-artemis-1.5.5.015-1.redhat_00001.1.ep7.el6, eap7-activemq-artemis-cli-1.5.5.015-1.redhat_00001.1.ep7.el6, eap7-activemq-artemis-commons-1.5.5.015-1.redhat_00001.1.ep7.el6 +47
  • RHSA-2019:0365 Released 2019-02-18 · Red Hat rating Moderate
    Red Hat JBoss Enterprise Application Platform 7.1.6 for RHEL 7 security update
    • Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 Server eap7-activemq-artemis-1.5.5.015-1.redhat_00001.1.ep7.el7, eap7-activemq-artemis-cli-1.5.5.015-1.redhat_00001.1.ep7.el7, eap7-activemq-artemis-commons-1.5.5.015-1.redhat_00001.1.ep7.el7 +47

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat JBoss Enterprise Application Platform 6AffectedNo fix planned: Out of support scope
Red Hat JBoss Fuse 6AffectedNo fix planned: Out of support scope
Red Hat JBoss Fuse Integration Service 2AffectedNo fix planned: Out of support scope
Red Hat OpenShift Application RuntimesAffectedNo fix yet
Red Hat JBoss EAP 7.2Fixed RHSA-2019:1106
Red Hat JBoss EAP 7.2 for RHEL 6 ServerFixed RHSA-2019:1107
Red Hat JBoss EAP 7.2 for RHEL 7 ServerFixed RHSA-2019:1108
Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 6 ServerFixed RHSA-2019:0364
Red Hat JBoss Enterprise Application Platform 7.1 for RHEL 7 ServerFixed RHSA-2019:0365
Red Hat Single Sign-On 7.2.6 zipFixed RHSA-2019:0380
Red Hat Single Sign-On 7.3.1 zipFixed RHSA-2019:1140
Red Hat Virtualization 4 Hypervisor for RHEL 7Fixed—
Red Hat Virtualization 4 Management Agent for RHEL 7 HostsFixed—
Not affected: 3 products
  • Red Hat Fuse 7
  • Red Hat JBoss Data Grid 7
  • Red Hat Single Sign-On 7

Timeline

  1. 2026-10-02 Threatist record created from CVE-2018-14642
  2. 2026-10-03 Alias added: GHSA-vf6r-mmhc-3xcm

References

Patch 1

Advisory 9

  • TI-2017-08941 Deserialization of untrusted data in Red Hat jbossas KEVCVSS 3.1CRITICAL 9.8
  • TI-2010-01790 JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for… KEVCVSS 3.1HIGH 8.8
  • TI-2017-09342 Unrestricted file upload in Apache Tomcat KEVCVSS 3.1HIGH 8.1
  • TI-2023-23979 The HTTP/2 protocol allows a denial of service (server resource consumption) because… KEVCVSS 3.1HIGH 7.5
  • TI-2010-01383 The Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterprise Application… KEVCVSS 3.1HIGH 7.5
  • TI-2017-09354 XML external entity injection in Apache Solr before 7.1 with Apache Lucene before 7.1 CVSS 3.1CRITICAL 9.8
See all 243 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences