CVE catalog

CVE-2019-19343

DEBIAN-CVE-2019-19343

[CVE catalog]

Severity
Medium · CVSS 5.9CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
1.63% · Oct 25, 2026

A flaw was found in Undertow when using Remoting as shipped in Red Hat Jboss EAP before version 7.2.4. A memory leak in HttpOpenListener due to holding remote connections indefinitely may lead to denial of service. Versions before undertow 2.0.25.SP1 and jboss-remoting 5.0.14.SP1 are believed to be vulnerable.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianundertow141.3.11-1vulnerable
Debianundertow141.3.16-1vulnerable
Debianundertow141.3.19-1vulnerable
Debianundertow141.3.21-1vulnerable
Debianundertow141.3.23-1vulnerable
Debianundertow141.3.4-1vulnerable
Debianundertow141.3.5-1vulnerable
Debianundertow141.3.7-1vulnerable
Debianundertow141.4.0-1vulnerable
Debianundertow141.4.1-1vulnerable
Debianundertow141.4.18-1vulnerable
Debianundertow141.4.20-1vulnerable
Debianundertow141.4.21-1vulnerable
Debianundertow141.4.21-2vulnerable
Debianundertow141.4.22-1vulnerable
Debianundertow141.4.23-1vulnerable
Debianundertow141.4.23-2vulnerable
Debianundertow141.4.23-3vulnerable
Debianundertow141.4.25-1vulnerable
Debianundertow141.4.25-2vulnerable
Debianundertow141.4.3-1vulnerable
Debianundertow141.4.4-1vulnerable
Debianundertow141.4.6-1vulnerable
Debianundertow141.4.7-1vulnerable
Debianundertow141.4.8-1vulnerable
Debianundertow142.0.23-1vulnerable
Debianundertow142.0.25-1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianundertowdeb142.0.25-1Not reportedDEBIAN-CVE-2019-19343Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]