A flaw was found in jboss-remoting in versions before 5.0.20.SP1-redhat-00001. A malicious attacker could cause threads to hold up forever in the EJB server by writing a sequence of bytes corresponding to the expected messages of a successful EJB client request, but omitting the ACK messages, or just tamper with jboss-remoting code, deleting the lines that send the ACK message from the EJB client code resulting in a denial of service. The highest threat from this vulnerability is to system availability.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: redhat
Published: 2021-06-02T13:22:16
Updated: 2024-08-04T17:02:08.052Z
Reserved: 2020-12-17T00:00:00
Link: CVE-2020-35510
Vulnrichment
No data.
NVD
Status : Modified
Published: 2021-06-02T14:15:09.393
Modified: 2024-11-21T05:27:27.853
Link: CVE-2020-35510
Redhat