CVE-2023-1108: redhat build of quarkus +15 lainnya

csirt@kutim:~/threat-intel/cve/CVE-2023-1108

CVSS 7.5 · High EPSS 1,8%

Kerentanan Loop with Unreachable Exit Condition ('Infinite Loop') pada redhat build of quarkus, redhat decision manager +14 lainnya. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

A flaw was found in undertow. This issue makes achieving a denial of service possible due to an unexpected handshake status updated in SslConduit, where the loop never terminates.

Rincian

Terbit di NVD: 14 September 2023
Terakhir diubah: 17 Juni 2026
Status NVD: Modified
CVSS 3.1: 7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')
EPSS (30 hari): 1,8% peluang dieksploitasi; lebih tinggi dari 77,5% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
redhat	build of quarkus	Semua versi
redhat	decision manager	Versi 7.0
redhat	fuse	Versi 1.0.0
redhat	integration camel k	Semua versi
redhat	integration service registry	Semua versi
redhat	jboss enterprise application platform	Semua versi
redhat	jboss enterprise application platform expansion pack	Semua versi
redhat	openshift application runtimes	Semua versi
redhat	openstack platform	Versi 13.0
redhat	process automation	Versi 7.0
redhat	single sign-on	Semua versi
redhat	undertow	Semua versi sebelum 2.2.24
redhat	undertow	Versi 2.3.0 hingga sebelum 2.3.5
redhat	openshift container platform	Versi 4.11
redhat	openshift container platform	Versi 4.12
redhat	openshift container platform for linuxone	Versi 4.9
redhat	openshift container platform for linuxone	Versi 4.10
redhat	openshift container platform for power	Versi 4.9
redhat	openshift container platform for power	Versi 4.10
redhat	jboss enterprise application platform	Versi 7.4
redhat	single sign-on	Versi 7.6
netapp	oncommand workflow automation	Semua versi

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://access.redhat.com/errata/RHSA-2023:1184 advisory vendor
https://access.redhat.com/errata/RHSA-2023:1185 advisory vendor
https://access.redhat.com/errata/RHSA-2023:1512 advisory vendor
https://access.redhat.com/errata/RHSA-2023:1513 advisory vendor
https://access.redhat.com/errata/RHSA-2023:1514 advisory vendor
https://access.redhat.com/errata/RHSA-2023:1516 advisory vendor
https://access.redhat.com/errata/RHSA-2023:3883 advisory vendor
https://access.redhat.com/errata/RHSA-2023:3884 advisory vendor
https://access.redhat.com/errata/RHSA-2023:3885 advisory vendor
https://access.redhat.com/errata/RHSA-2023:3888 advisory vendor
https://access.redhat.com/errata/RHSA-2023:3892 advisory vendor
https://access.redhat.com/errata/RHSA-2023:3954 advisory vendor
https://access.redhat.com/errata/RHSA-2023:4612 advisory vendor
https://access.redhat.com/security/cve/CVE-2023-1108 advisory vendor
https://security.netapp.com/advisory/ntap-20231020-0002/ advisory pihak ketiga
https://access.redhat.com/errata/RHSA-2023:2135
https://bugzilla.redhat.com/show_bug.cgi?id=2174246 issue tracking
https://github.com/advisories/GHSA-m4mm-pg93-fv78

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.