1. Home
  2. Vulnerabilities
  3. CVE-2020-14326

CVE-2020-14326

CVSS v3.1 7.5 (High)
75% Progress
CVSS v2.0 5 (Medium)
50% Progress
EPSS 0.10 % (41th)
0.10% Progress
Affected Products 3
Advisories 1
Info CVSS EPSS CAPEC Affected Configurations References Security Advisories Packages & Software OVAL Graph Web & Social Timeline

A vulnerability was found in RESTEasy, where RootNode incorrectly caches routes. This issue results in hash flooding, leading to slower requests with higher CPU time spent searching and adding the entry. This flaw allows an attacker to cause a denial of service.

Weaknesses
CWE-400
Uncontrolled Resource Consumption
CWE-NVD-Other
CVE Status
PUBLISHED
CNA
Red Hat, Inc.
Published Date
2021-06-02 12:15:08
(3 years ago)
Updated Date
2022-07-15 17:38:28
(2 years ago)

Affected Products

Netapp

Redhat

Configuration #1

    CPE23 From Up To
  Redhat Integration Camel K cpe:2.3:a:redhat:integration_camel_k:-
  Redhat Resteasy from 4.2.0 version and prior 4.5.6 version cpe:2.3:a:redhat:resteasy >= 4.2.0 < 4.5.6

Configuration #2

    CPE23 From Up To
  Netapp Oncommand Insight cpe:2.3:a:netapp:oncommand_insight:-