Undertow-core: oom via missing limits in chunked trailer in eap's undertow
Summary
| CVE | CVE-2026-15561 |
|---|---|
| State | PUBLISHED |
| Assigner | redhat |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2026-08-11 09:17:12 UTC |
| Updated | 2026-11-01 01:17:25 UTC |
| Description | A flaw was found in EAP's undertow http/1.1 chunked-transfer decoder. missing limits on size and count would allow an attacker to use an unauthenticated connection to drive the JVM to an OutOfMemory error, stopping all deployments on the listener, and achieving Denial of Service. |
Risk And Classification
Primary CVSS: v3.1 7.5 HIGH from [email protected]
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS: 0.004610000 probability, percentile 0.389640000 (date 2026-10-22)
Problem Types: CWE-770 | CWE-770 Allocation of Resources Without Limits or Throttling
| Version | Source | Type | Score | Severity | Vector |
|---|---|---|---|---|---|
| 3.1 | [email protected] | Secondary | 7.5 | HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| 3.1 | CNA | CVSS | 7.5 | HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
CVSS v3.1 Breakdown
Attack Vector
NetworkAttack Complexity
LowPrivileges Required
NoneUser Interaction
NoneScope
UnchangedConfidentiality
NoneIntegrity
NoneAvailability
HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|---|---|---|---|
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4.25 | Not specified | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 7 | unaffected 0:2.16.0-22.redhat_00057.1.el7eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 7 | unaffected 0:2.3.14-11.SP11_redhat_00001.1.el7eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 7 | unaffected 0:1.5.26-2.Final_redhat_00001.1.el7eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 7 | unaffected 0:2.18.8-1.redhat_00003.1.el7eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 7 | unaffected 0:2.18.8-1.redhat_00003.1.el7eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 7 | unaffected 0:2.18.8-1.redhat_00003.1.el7eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 7 | unaffected 0:2.18.8-1.redhat_00003.1.el7eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 7 | unaffected 0:2.18.8-1.redhat_00003.1.el7eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 7 | unaffected 0:2.18.8-1.redhat_00003.1.el7eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 7 | unaffected 0:5.0.31-3.SP2_redhat_00001.1.el7eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 7 | unaffected 0:1.10.0-46.Final_redhat_00044.1.el7eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 7 | unaffected 0:4.1.135-1.Final_redhat_00001.1.el7eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 7 | unaffected 0:4.1.135-1.Final_redhat_00001.1.el7eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 7 | unaffected 0:2.5.5-30.SP12_redhat_00020.1.el7eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 7 | unaffected 0:2.5.5-24.SP12_redhat_00016.1.el7eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 7 | unaffected 0:2.2.40-2.SP3_redhat_00001.1.el7eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7.4 ELS On RHEL 7 | unaffected 0:7.4.25-2.GA_redhat_00001.1.el7eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1.8.GA | unaffected 2.3.26.SP3-redhat-00001 * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:2.40.0-8.redhat_00024.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:4.1.7-1.SP1_redhat_00001.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:2.0.5-1.Final_redhat_00001.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:1.85.0-1.redhat_00001.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:1.2.7-1.redhat_00002.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:801.8.0-1.GA_redhat_00001.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:6.6.54-1.Final_redhat_00001.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:4.1.5-5.redhat_00008.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:3.0.22-1.Final_redhat_00001.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:2.18.9-1.redhat_00003.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:2.18.9-1.redhat_00003.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:2.18.9-1.redhat_00003.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:2.18.9-1.redhat_00003.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:2.18.9-1.redhat_00003.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:2.18.9-1.redhat_00003.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:2.18.9-1.redhat_00003.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:4.0.5-1.redhat_00001.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:4.0.7-4.redhat_00001.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:2.1.0-1.redhat_00001.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:3.6.3-1.Final_redhat_00001.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:5.0.31-1.SP2_redhat_00001.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:3.1.0-1.Final_redhat_00001.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:2.2.0-1.Final_redhat_00001.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:7.4.0-1.Final_redhat_00001.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:3.0.1-1.Final_redhat_00001.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:5.1.0-1.Final_redhat_00001.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:4.0.11-2.SP1_redhat_00001.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:2.25.4-1.redhat_00003.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:3.2.2-1.redhat_00001.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:4.1.136-1.Final_redhat_00001.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:4.1.136-1.Final_redhat_00001.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:9.37.4-1.redhat_00001.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:1.1.9-1.redhat_00001.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:3.0.6-1.redhat_00001.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:2.0.18-1.redhat_00001.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:2.3.26-2.SP3_redhat_00001.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:8.1.8-9.GA_redhat_00006.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:2.6.11-1.Final_redhat_00001.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:8.1.1-12.GA_redhat_00048.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:2.3.2-1.redhat_00001.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 10 | unaffected 0:3.0.6-1.redhat_00001.1.el10eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:2.40.0-8.redhat_00024.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:4.1.7-1.SP1_redhat_00001.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:2.0.5-1.Final_redhat_00001.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:1.85.0-1.redhat_00001.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:1.2.7-1.redhat_00002.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:801.8.0-1.GA_redhat_00001.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:6.6.54-1.Final_redhat_00001.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:4.1.5-5.redhat_00008.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:3.0.22-1.Final_redhat_00001.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:2.18.9-1.redhat_00003.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:2.18.9-1.redhat_00003.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:2.18.9-1.redhat_00003.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:2.18.9-1.redhat_00003.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:2.18.9-1.redhat_00003.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:2.18.9-1.redhat_00003.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:2.18.9-1.redhat_00003.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:4.0.5-1.redhat_00001.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:4.0.7-4.redhat_00001.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:2.1.0-1.redhat_00001.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:3.6.3-1.Final_redhat_00001.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:5.0.31-1.SP2_redhat_00001.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:3.1.0-1.Final_redhat_00001.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:2.2.0-1.Final_redhat_00001.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:7.4.0-1.Final_redhat_00001.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:3.0.1-1.Final_redhat_00001.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:5.1.0-1.Final_redhat_00001.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:4.0.11-2.SP1_redhat_00001.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:2.25.4-1.redhat_00003.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:3.2.2-1.redhat_00001.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:4.1.136-1.Final_redhat_00001.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:4.1.136-1.Final_redhat_00001.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:9.37.4-1.redhat_00001.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:1.1.9-1.redhat_00001.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:3.0.6-1.redhat_00001.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:2.0.18-1.redhat_00001.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:2.3.26-2.SP3_redhat_00001.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:8.1.8-9.GA_redhat_00006.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:2.6.11-1.Final_redhat_00001.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:8.1.1-12.GA_redhat_00048.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:2.3.2-1.redhat_00001.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 8 | unaffected 0:3.0.6-1.redhat_00001.1.el8eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:2.40.0-8.redhat_00024.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:4.1.7-1.SP1_redhat_00001.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:2.0.5-1.Final_redhat_00001.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:1.85.0-1.redhat_00001.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:1.2.7-1.redhat_00002.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:801.8.0-1.GA_redhat_00001.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:6.6.54-1.Final_redhat_00001.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:4.1.5-5.redhat_00008.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:3.0.22-1.Final_redhat_00001.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:2.18.9-1.redhat_00003.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:2.18.9-1.redhat_00003.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:2.18.9-1.redhat_00003.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:2.18.9-1.redhat_00003.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:2.18.9-1.redhat_00003.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:2.18.9-1.redhat_00003.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:2.18.9-1.redhat_00003.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:4.0.5-1.redhat_00001.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:4.0.7-4.redhat_00001.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:2.1.0-1.redhat_00001.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:3.6.3-1.Final_redhat_00001.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:5.0.31-1.SP2_redhat_00001.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:3.1.0-1.Final_redhat_00001.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:2.2.0-1.Final_redhat_00001.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:7.4.0-1.Final_redhat_00001.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:3.0.1-1.Final_redhat_00001.1el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:5.1.0-1.Final_redhat_00001.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:4.0.11-2.SP1_redhat_00001.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:2.25.4-1.redhat_00003.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:3.2.2-1.redhat_00001.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:4.1.136-1.Final_redhat_00001.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:4.1.136-1.Final_redhat_00001.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:9.37.4-1.redhat_00001.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:1.1.9-1.redhat_00001.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:3.0.6-1.redhat_00001.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:2.0.18-1.redhat_00001.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:2.3.26-2.SP3_redhat_00001.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:8.1.8-9.GA_redhat_00006.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:2.6.11-1.Final_redhat_00001.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:8.1.1-12.GA_redhat_00048.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:2.3.2-1.redhat_00001.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 8.1 For RHEL 9 | unaffected 0:3.0.6-1.redhat_00001.1.el9eap * rpm | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform 7 | Not specified | Not specified |
| CNA | Red Hat | Red Hat JBoss Enterprise Application Platform Expansion Pack | Not specified | Not specified |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| access.redhat.com/errata/RHSA-2026:70229 | [email protected] | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:70228 | [email protected] | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:70277 | [email protected] | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:70230 | [email protected] | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:53806 | [email protected] | access.redhat.com | |
| access.redhat.com/security/cve/CVE-2026-15561 | [email protected] | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:53644 | [email protected] | access.redhat.com | |
| bugzilla.redhat.com/show_bug.cgi | [email protected] | bugzilla.redhat.com | |
| access.redhat.com/errata/RHSA-2026:53645 | MITRE | access.redhat.com | |
| access.redhat.com/errata/RHSA-2026:53646 | MITRE | access.redhat.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
Additional Advisory Data
| Source | Time | Event |
|---|---|---|
| CNA | 2026-05-29T00:41:31.600Z | Reported to Red Hat. |
| CNA | 2026-08-11T05:52:49.718Z | Made public. |
Workarounds
CNA: Deploy a re-framing layer-7 reverse proxy such as nginx, HAProxy in http mode, or an AWS Application Load Balancer in front of the affected JBoss EAP listener. Because such a proxy terminates and re-frames the HTTP/1.1 chunked request, an oversized chunked trailer cannot be passed through to Undertow, which fully mitigates this issue. Direct-edge and layer-4/TCP load-balanced deployments lack this protection; for those deployments, no other workaround meeting Red Hat Product Security criteria is available, and the fixes being delivered for the affected EAP streams should be applied when released.
There are currently no legacy QID mappings associated with this CVE.