Remote Denial of Service Vulnerability in Undertow by Red Hat
CVE-2024-3884

7.5HIGH

Key Information:

Vendor: Red Hat
Status: Red Hat Jboss Enterprise Application Platform 8.1; Red Hat Jboss Enterprise Application Platform 8.1 For Rhel 8; Red Hat Jboss Enterprise Application Platform 8.1 For Rhel 9; Openshift Serverless
Vendor: CVE Published:; 3 December 2025

What is CVE-2024-3884?

A vulnerability exists in Undertow, a web server framework developed by Red Hat, that enables unauthorized users to execute remote denial of service attacks. This flaw arises when the server's FormEncodedDataDefinition.doParse(StreamSourceChannel) method is called to handle excessively large form data encoded in application/x-www-form-urlencoded format. The result is an OutOfMemory error, making it possible for an attacker to disrupt service availability. Organizations utilizing Undertow are encouraged to assess their configurations and manage input sizes to mitigate potential exploitation risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch