Undertow: improper state management in proxy protocol parsing causes information leakage

Summary

CVE	CVE-2024-7885
State	PUBLISHED
Assigner	redhat
Source Priority	CVE Program / NVD first with legacy fallback
Published	2024-08-21 14:15:09 UTC
Updated	2026-08-07 10:16:54 UTC
Description	A vulnerability was found in Undertow where the ProxyProtocolReadListener reuses the same StringBuilder instance across multiple requests. This issue occurs when the parseProxyProtocolV1 method processes multiple requests on the same HTTP connection. As a result, different requests may share the same StringBuilder instance, potentially leading to information leakage between requests or responses. In some cases, a value from a previous request or response may be erroneously reused, which could lead to unintended data exposure. This issue primarily results in errors and connection termination but creates a risk of data leakage in multi-request environments.

Risk And Classification

Primary CVSS: v3.1 7.5 HIGH from [email protected]

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.026440000 probability, percentile 0.841510000 (date 2026-08-10)

Problem Types: CWE-362 | NVD-CWE-noinfo | CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Version	Source	Type	Score	Severity	Vector
3.1	[email protected]	Primary	7.5	HIGH	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H`
3.1	[email protected]	Secondary	7.5	HIGH	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H`
3.1	CNA	CVSS	7.5	HIGH	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H`

CVSS v3.1 Breakdown

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Application	Redhat	Build Of Apache Camel - Hawtio	-	All	All	All
Application	Redhat	Build Of Apache Camel For Spring Boot	-	All	All	All
Application	Redhat	Build Of Keycloak	-	All	All	All
Application	Redhat	Data Grid	8.0.0	All	All	All
Application	Redhat	Integration Camel K	-	All	All	All
Application	Redhat	Jboss Enterprise Application Platform	7.0.0	All	All	All
Application	Redhat	Jboss Enterprise Application Platform	8.0.0	All	All	All
Application	Redhat	Jboss Fuse	7.0.0	All	All	All
Application	Redhat	Process Automation	7.0	All	All	All
Application	Redhat	Single Sign-on	7.0	All	All	All

Vendor Declared Affected Products

Source	Vendor	Product	Version	Platforms
CNA	Red Hat	HawtIO 4.0.0 For Red Hat Build Of Apache Camel 4	Not specified	Not specified
CNA	Red Hat	Red Hat Build Of Apache Camel 3.20.7 For Spring Boot	Not specified	Not specified
CNA	Red Hat	Red Hat Build Of Apache Camel 4.4.2 For Spring Boot	Not specified	Not specified
CNA	Red Hat	Red Hat JBoss Enterprise Application Platform 7	Not specified	Not specified
CNA	Red Hat	Red Hat JBoss Enterprise Application Platform 7	Not specified	Not specified
CNA	Red Hat	Red Hat JBoss Enterprise Application Platform 7.3 EUS For RHEL 7	unaffected 0:1.11.0-1.redhat_00001.1.el7eap * rpm	Not specified
CNA	Red Hat	Red Hat JBoss Enterprise Application Platform 7.3 EUS For RHEL 7	unaffected 0:2.4.11-1.Final_redhat_00001.1.el7eap * rpm	Not specified
CNA	Red Hat	Red Hat JBoss Enterprise Application Platform 7.3 EUS For RHEL 7	unaffected 0:1.7.2-19.Final_redhat_00020.1.el7eap * rpm	Not specified
CNA	Red Hat	Red Hat JBoss Enterprise Application Platform 7.3 EUS For RHEL 7	unaffected 0:2.0.41-5.SP6_redhat_00001.1.el7eap * rpm	Not specified
CNA	Red Hat	Red Hat JBoss Enterprise Application Platform 7.3 EUS For RHEL 7	unaffected 0:7.3.15-5.GA_redhat_00003.1.el7eap * rpm	Not specified
CNA	Red Hat	Red Hat JBoss Enterprise Application Platform 7.3 EUS For RHEL 7	unaffected 0:2.10.4-4.redhat_00008.1.el7eap * rpm	Not specified
CNA	Red Hat	Red Hat JBoss Enterprise Application Platform 7.3 EUS For RHEL 7	unaffected 0:2.10.4-4.redhat_00008.1.el7eap * rpm	Not specified
CNA	Red Hat	Red Hat JBoss Enterprise Application Platform 7.3 EUS For RHEL 7	unaffected 0:2.10.4-6.redhat_00008.1.el7eap * rpm	Not specified
CNA	Red Hat	Red Hat JBoss Enterprise Application Platform 7.3 EUS For RHEL 7	unaffected 0:2.10.4-4.redhat_00008.1.el7eap * rpm	Not specified
CNA	Red Hat	Red Hat JBoss Enterprise Application Platform 7.3 EUS For RHEL 7	unaffected 0:2.10.4-6.redhat_00008.1.el7eap * rpm	Not specified
CNA	Red Hat	Red Hat JBoss Enterprise Application Platform 7.3 EUS For RHEL 7	unaffected 0:2.10.4-3.redhat_00008.1.el7eap * rpm	Not specified
CNA	Red Hat	Red Hat JBoss Enterprise Application Platform 7.3 EUS For RHEL 7	unaffected 0:1.7.2-20.Final_redhat_00021.1.el7eap * rpm	Not specified
CNA	Red Hat	Red Hat JBoss Enterprise Application Platform 7.3 EUS For RHEL 7	unaffected 0:4.1.63-6.Final_redhat_00004.1.el7eap * rpm	Not specified
CNA	Red Hat	Red Hat JBoss Enterprise Application Platform 7.3 EUS For RHEL 7	unaffected 0:2.0.41-6.SP7_redhat_00001.1.el7eap * rpm	Not specified
CNA	Red Hat	Red Hat JBoss Enterprise Application Platform 7.3 EUS For RHEL 7	unaffected 0:7.3.16-3.GA_redhat_00003.1.el7eap * rpm	Not specified
CNA	Red Hat	Red Hat JBoss Enterprise Application Platform 7.4 For RHEL 8	unaffected 0:2.2.33-2.SP2_redhat_00001.1.el8eap * rpm	Not specified
CNA	Red Hat	Red Hat JBoss Enterprise Application Platform 7.4 For RHEL 8	unaffected 0:7.4.18-1.GA_redhat_00003.1.el8eap * rpm	Not specified
CNA	Red Hat	Red Hat JBoss Enterprise Application Platform 7.4 For RHEL 9	unaffected 0:2.2.33-2.SP2_redhat_00001.1.el9eap * rpm	Not specified
CNA	Red Hat	Red Hat JBoss Enterprise Application Platform 7.4 For RHEL 9	unaffected 0:7.4.18-1.GA_redhat_00003.1.el9eap * rpm	Not specified
CNA	Red Hat	Red Hat JBoss Enterprise Application Platform 7.4 On RHEL 7	unaffected 0:2.2.33-2.SP2_redhat_00001.1.el7eap * rpm	Not specified
CNA	Red Hat	Red Hat JBoss Enterprise Application Platform 7.4 On RHEL 7	unaffected 0:7.4.18-1.GA_redhat_00003.1.el7eap * rpm	Not specified
CNA	Red Hat	Red Hat JBoss Enterprise Application Platform 8	Not specified	Not specified
CNA	Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 For RHEL 8	unaffected 0:1.11.9-2.redhat_00001.1.el8eap * rpm	Not specified
CNA	Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 For RHEL 8	unaffected 0:800.3.1-2.GA_redhat_00002.1.el8eap * rpm	Not specified
CNA	Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 For RHEL 8	unaffected 0:2.3.14-2.SP2_redhat_00001.1.el8eap * rpm	Not specified
CNA	Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 For RHEL 8	unaffected 0:8.0.3-13.GA_redhat_00007.1.el8eap * rpm	Not specified
CNA	Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 For RHEL 9	unaffected 0:1.11.9-2.redhat_00001.1.el9eap * rpm	Not specified
CNA	Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 For RHEL 9	unaffected 0:800.3.1-2.GA_redhat_00002.1.el9eap * rpm	Not specified
CNA	Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 For RHEL 9	unaffected 0:2.3.14-2.SP2_redhat_00001.1.el9eap * rpm	Not specified
CNA	Red Hat	Red Hat JBoss Enterprise Application Platform 8.0 For RHEL 9	unaffected 0:8.0.3-13.GA_redhat_00007.1.el9eap * rpm	Not specified
CNA	Red Hat	Red Hat Build Of Apache Camel For Spring Boot 3	Not specified	Not specified
CNA	Red Hat	Red Hat Build Of Apache Camel - HawtIO 4	Not specified	Not specified
CNA	Red Hat	Red Hat Build Of Keycloak	Not specified	Not specified
CNA	Red Hat	Red Hat Build Of Quarkus	Not specified	Not specified
CNA	Red Hat	Red Hat Data Grid 8	Not specified	Not specified
CNA	Red Hat	Red Hat Fuse 7	Not specified	Not specified
CNA	Red Hat	Red Hat Integration Camel K 1	Not specified	Not specified
CNA	Red Hat	Red Hat JBoss Data Grid 7	Not specified	Not specified
CNA	Red Hat	Red Hat JBoss Enterprise Application Platform 7	Not specified	Not specified
CNA	Red Hat	Red Hat JBoss Enterprise Application Platform Expansion Pack	Not specified	Not specified
CNA	Red Hat	Red Hat Process Automation 7	Not specified	Not specified
CNA	Red Hat	Red Hat Single Sign-On 7	Not specified	Not specified

References

Reference	Source	Link	Tags
access.redhat.com/errata/RHSA-2024:7441	[email protected]	access.redhat.com
access.redhat.com/errata/RHSA-2024:8080	[email protected]	access.redhat.com
access.redhat.com/errata/RHSA-2026:0743	[email protected]	access.redhat.com
access.redhat.com/errata/RHSA-2024:7442	[email protected]	access.redhat.com
access.redhat.com/errata/RHSA-2024:7735	[email protected]	access.redhat.com
bugzilla.redhat.com/show_bug.cgi	[email protected]	bugzilla.redhat.com	Issue Tracking, Vendor Advisory
access.redhat.com/errata/RHSA-2024:7736	[email protected]	access.redhat.com
access.redhat.com/errata/RHSA-2024:6883	[email protected]	access.redhat.com
access.redhat.com/errata/RHSA-2025:16667	[email protected]	access.redhat.com
access.redhat.com/errata/RHSA-2024:6508	[email protected]	access.redhat.com
access.redhat.com/security/cve/CVE-2024-7885	[email protected]	access.redhat.com	Vendor Advisory
access.redhat.com/errata/RHSA-2024:11023	[email protected]	access.redhat.com
security.netapp.com/advisory/ntap-20241011-0004	af854a3a-2127-422b-91ae-364da2661108	security.netapp.com
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

Vendor Comments And Credit

Discovery Credit

CNA: Red Hat would like to thank BfC for reporting this issue. (en)

Additional Advisory Data

Source	Time	Event
CNA	2024-08-16T09:00:41.686Z	Reported to Red Hat.
CNA	2024-08-07T00:00:00.000Z	Made public.

There are currently no legacy QID mappings associated with this CVE.