MEDIUMCVSS 4.1EPSS 0.3%

CVE-2024-4029

Wildfly vulnerable to denial of service

Published: 2024-05-02
Modified: 2026-07-21
EPSS percentile: 20%
Aliases: GHSA-x7g6-rwhc-g7mj
Sources: github-advisory

Summary

A vulnerability was found in Wildfly’s management interface. Due to the lack of limitation of sockets for the management interface, it may be possible to cause a denial of service hitting the nofile limit as there is no possibility to configure or set a maximum number of connections.

Affected packages

Ecosystem	Package	Affected versions	Fixed versions
Maven	org.wildfly:wildfly-domain-http	—	—

Remediation: No patched version is listed by GitHub.

References

https://github.com/advisories/GHSA-x7g6-rwhc-g7mj

Includes data from the GitHub Advisory Database, licensed under CC-BY 4.0.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.

EPSS scores provided by the FIRST.org Exploit Prediction Scoring System.