CVE-2022-2764

MediumCVSS 4.9/10Last modified Jun 17, 2026

Description

A flaw was found in Undertow. Denial of service can be achieved as Undertow server waits for the LAST_CHUNK forever for EJB invocations.

Metrics

CVSS 3.1 4.9/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-400

Affected software

No affected versions have been published.

Timeline

Published
Sep 1, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-276406.5A vulnerability has been identified in SIMATIC CP 442-1 RNA (All versions < V1.5.18), SIMATIC CP 443-1 RNA (All versions < V1.5.18). The affCVE-2022-276418.8This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.9CVE-2022-276428.8This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.91CVE-2022-276438.8This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.9CVE-2022-276448.8This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGCVE-2022-276458.8This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6700v3 routers. AuthentiCVE-2022-276468.8This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.9CVE-2022-276478.0This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.9CVE-2022-276487.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of KOYO Screen Creator 0.1.1.1. User interactCVE-2022-276497.5A flaw was found in Podman, where containers were started incorrectly with non-empty default permissions. A vulnerability was found in Moby CVE-2022-27659.8A vulnerability was found in SourceCodester Company Website CMS 1.0. It has been declared as critical. Affected by this vulnerability is an CVE-2022-276507.5A flaw was found in crun where containers were incorrectly started with non-empty default permissions. A vulnerability was found in Moby (Do
CVE-2022-2764: Medium severity, CVSS 4.9 | Vulnix