[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fqDGMmC2Xk4DBszpzTxr0a7OcWzH0Nd1oIdmpZdBJb2o":3,"g5a-risk:CVE-2017-2670":189},{"success":4,"data":5,"meta":187},true,{"cveId":6,"title":7,"description":8,"shortDescription":8,"publishedDate":9,"lastModified":10,"cvssScore":11,"cvssVector":12,"cvssMetrics":13,"epssScore":42,"epssPercentile":14,"epssTimeSeries":43,"severity":44,"affectedProducts":45,"affectedProductsCount":73,"references":74,"referencesCount":115,"weaknesses":116,"weaknessesCount":125,"isActivelyExploited":126,"cisaInfo":14,"otxData":14,"relatedBlogPosts":127,"seoMetadata":128,"configurations":153,"relatedVendorCves":185,"notableEvents":186},"CVE-2017-2670","What is CVE-2017-2670?","It was found in Undertow before 1.3.28 that with non-clean TCP close, the Websocket server gets into infinite loop on every IO thread, effectively causing DoS.","2018-07-27T15:29:00.487","2019-10-09T23:27:03.993",7.5,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":14,"CVSSMetricV30":15,"CVSSMetricV2":32,"CVSSMetricV40":14},null,[16,28],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":26,"ImpactScore":27},"nvd@nist.gov","Primary",{"Version":20,"VectorString":12,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":25,"BaseScore":11,"BaseSeverity":25,"ExploitCodeMaturity":14,"RemediationLevel":14,"ReportConfidence":14,"TemporalScore":14,"TemporalSeverity":14,"ConfidentialityRequirement":14,"IntegrityRequirement":14,"AvailabilityRequirement":14,"ModifiedAttackVector":14,"ModifiedAttackComplexity":14,"ModifiedPrivilegesRequired":14,"ModifiedUserInteraction":14,"ModifiedScope":14,"ModifiedConfidentialityImpact":14,"ModifiedIntegrityImpact":14,"ModifiedAvailabilityImpact":14,"EnvironmentalScore":14,"EnvironmentalSeverity":14},"3.0","NETWORK","LOW","NONE","UNCHANGED","HIGH",3.9,3.6,{"Source":29,"Type":30,"CVSSData":31,"ExploitabilityScore":26,"ImpactScore":27},"secalert@redhat.com","Secondary",{"Version":20,"VectorString":12,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":25,"BaseScore":11,"BaseSeverity":25,"ExploitCodeMaturity":14,"RemediationLevel":14,"ReportConfidence":14,"TemporalScore":14,"TemporalSeverity":14,"ConfidentialityRequirement":14,"IntegrityRequirement":14,"AvailabilityRequirement":14,"ModifiedAttackVector":14,"ModifiedAttackComplexity":14,"ModifiedPrivilegesRequired":14,"ModifiedUserInteraction":14,"ModifiedScope":14,"ModifiedConfidentialityImpact":14,"ModifiedIntegrityImpact":14,"ModifiedAvailabilityImpact":14,"EnvironmentalScore":14,"EnvironmentalSeverity":14},[33],{"Source":17,"Type":18,"CVSSData":34,"BaseSeverity":39,"ExploitabilityScore":40,"ImpactScore":41,"ACInsufInfo":14,"ObtainAllPrivilege":14,"ObtainUserPrivilege":14,"ObtainOtherPrivilege":14,"UserInteractionRequired":14},{"Version":35,"VectorString":36,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":37,"BaseScore":38,"BaseSeverity":14,"Exploitability":14,"RemediationLevel":14,"ReportConfidence":14,"TemporalScore":14,"CollateralDamagePotential":14,"TargetDistribution":14,"ConfidentialityRequirement":14,"IntegrityRequirement":14,"AvailabilityRequirement":14,"EnvironmentalScore":14},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:N\u002FI:N\u002FA:P","PARTIAL",5,"MEDIUM",10,2.9,0.03616,[42,42,42,42,42,42,42],"High",[46,51,56,60,63,66,70],{"vendor":47,"product":48,"version":49,"criteria":50,"vulnerable":4},"redhat","undertow","*","cpe:2.3:a:redhat:undertow:*:*:*:*:*:*:*:*",{"vendor":52,"product":53,"version":54,"criteria":55,"vulnerable":4},"debian","debian_linux","9.0","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",{"vendor":47,"product":57,"version":58,"criteria":59,"vulnerable":4},"jboss_enterprise_application_platform","6.0.0","cpe:2.3:a:redhat:jboss_enterprise_application_platform:6.0.0:*:*:*:*:*:*:*",{"vendor":47,"product":57,"version":61,"criteria":62,"vulnerable":4},"7.0.0","cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.0.0:*:*:*:*:*:*:*",{"vendor":47,"product":57,"version":64,"criteria":65,"vulnerable":4},"7.1.0","cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.1.0:*:*:*:*:*:*:*",{"vendor":47,"product":67,"version":68,"criteria":69,"vulnerable":4},"enterprise_linux","6.0","cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",{"vendor":47,"product":67,"version":71,"criteria":72,"vulnerable":4},"7.0","cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",7,[75,80,86,89,92,95,98,101,104,107,111],{"url":76,"source":77,"tags":78},"http:\u002F\u002Frhn.redhat.com\u002Ferrata\u002FRHSA-2017-1409.html","Red Hat",[79],"Vendor Advisory",{"url":81,"source":82,"tags":83},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F98965","Securityfocus",[84,85],"Third Party Advisory","VDB Entry",{"url":87,"source":77,"tags":88},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2017:1410",[79],{"url":90,"source":77,"tags":91},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2017:1411",[79],{"url":93,"source":77,"tags":94},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2017:1412",[79],{"url":96,"source":77,"tags":97},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2017:3454",[79],{"url":99,"source":77,"tags":100},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2017:3455",[79],{"url":102,"source":77,"tags":103},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2017:3456",[79],{"url":105,"source":77,"tags":106},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2017:3458",[79],{"url":108,"source":77,"tags":109},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=CVE-2017-2670",[110,79],"Issue Tracking",{"url":112,"source":113,"tags":114},"https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2017\u002Fdsa-3906","Debian",[84],11,[117],{"id":118,"name":119,"description":120,"extendedDescription":121,"status":122,"abstraction":123,"structure":124},"CWE-835","Loop with Unreachable Exit Condition ('Infinite Loop')","The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.","If the loop can be influenced by an attacker, this weakness could allow attackers to consume excessive resources such as CPU or memory.","Incomplete","Base","Simple",1,false,[],{"title":129,"metaDescription":130,"keywords":131,"canonicalUrl":132,"structuredData":133},"What is CVE-2017-2670? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2017-2670, a high severity cyber security vulnerability from 2018. It was found in Undertow before 1.3.28 that with non-clean T...","CVE-2017-2670, CVE-2017-2670 vulnerability, CVE-2017-2670 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, redhat security, debian security, undertow vulnerability, debian_linux vulnerability, jboss_enterprise_application_platform vulnerability, enterprise_linux vulnerability","\u002Fwhat-is\u002Fcve-2017-2670",{"@context":134,"@type":135,"headline":129,"description":130,"datePublished":9,"dateModified":10,"author":136,"publisher":140,"about":144,"mainEntityOfPage":148,"articleSection":151,"keywords":152},"https:\u002F\u002Fschema.org","TechArticle",{"@type":137,"name":138,"url":139},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":137,"name":138,"url":139,"logo":141},{"@type":142,"url":143},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":145,"name":6,"description":146,"additionalType":147},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":149,"@id":150},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2017-2670","Cybersecurity","CVE-2017-2670, CVE-2017-2670 vulnerability, CVE-2017-2670 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[154,162,168],{"Operator":14,"Negate":14,"Nodes":155},[156],{"Operator":157,"Negate":14,"CPEMatch":158},"OR",[159],{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":160,"VersionStartExcluding":14,"VersionStartIncluding":14,"VersionEndExcluding":161,"VersionEndIncluding":14},"1924AB4B-804C-405F-8889-7D0CBED7381F","1.3.28",{"Operator":14,"Negate":14,"Nodes":163},[164],{"Operator":157,"Negate":14,"CPEMatch":165},[166],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":167,"VersionStartExcluding":14,"VersionStartIncluding":14,"VersionEndExcluding":14,"VersionEndIncluding":14},"DEECE5FC-CACF-4496-A3E7-164736409252",{"Operator":169,"Negate":14,"Nodes":170},"AND",[171,179],{"Operator":157,"Negate":14,"CPEMatch":172},[173,175,177],{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":174,"VersionStartExcluding":14,"VersionStartIncluding":14,"VersionEndExcluding":14,"VersionEndIncluding":14},"B142ACCC-F7A9-4A3B-BE60-0D6691D5058D",{"Vulnerable":4,"Criteria":62,"MatchCriteriaID":176,"VersionStartExcluding":14,"VersionStartIncluding":14,"VersionEndExcluding":14,"VersionEndIncluding":14},"72A54BDA-311C-413B-8E4D-388AD65A170A",{"Vulnerable":4,"Criteria":65,"MatchCriteriaID":178,"VersionStartExcluding":14,"VersionStartIncluding":14,"VersionEndExcluding":14,"VersionEndIncluding":14},"868C0845-F25C-487F-A697-72917BE9D78E",{"Operator":157,"Negate":14,"CPEMatch":180},[181,183],{"Vulnerable":14,"Criteria":69,"MatchCriteriaID":182,"VersionStartExcluding":14,"VersionStartIncluding":14,"VersionEndExcluding":14,"VersionEndIncluding":14},"2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC",{"Vulnerable":14,"Criteria":72,"MatchCriteriaID":184,"VersionStartExcluding":14,"VersionStartIncluding":14,"VersionEndExcluding":14,"VersionEndIncluding":14},"142AD0DD-4CF3-4D74-9442-459CE3347E3A",[],[],{"lastModified":10,"cacheTime":188,"version":35},1792248368706,{"score":190,"band":191,"action":192,"scoredAt":193},47,"Medium","Plan remediation","2026-10-16T06:44:39.021085+00:00"]