Undertow: improper state management in proxy protocol parsing causes information leakage

7.5 CVSS

Vulnerability Description

A vulnerability was found in Undertow where the ProxyProtocolReadListener reuses the same StringBuilder instance across multiple requests. This issue occurs when the parseProxyProtocolV1 method processes multiple requests on the same HTTP connection. As a result, different requests may share the same StringBuilder instance, potentially leading to information leakage between requests or responses. In some cases, a value from a previous request or response may be erroneously reused, which could lead to unintended data exposure. This issue primarily results in errors and connection termination but creates a risk of data leakage in multi-request environments.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-7885

Check My Exposure

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

Red Hat would like to thank BfC for reporting this issue.

References

More from Unknown

View All →

CVE-2025-9978

Jeg Elementor Kit < 2.7.0 - Author+ Stored XSS

Unknown 0

CVE-2025-9959

Sandbox escape in smolagents Local Python execution environment via dunder attributes

High 7.6

CVE-2025-9900

Libtiff: libtiff write-what-where

High 8.8

CVE-2025-9784

Undertow: undertow madeyoureset http/2 ddos vulnerability

High 7.5

CVE-2025-9710

Responsive Lightbox & Gallery < 2.5.3 - Unauthenticated Stored-XSS via Comments

Unknown 0

Affected Vendor

Unknown

View all reports →

Affected Software

HawtIO 4.0.0 for Red Hat build of Apache Camel 4, Red Hat build of Apache Camel 3.20.7 for Spring Boot, Red Hat build of Apache Camel 4.4.2 for Spring Boot, Red Hat JBoss Enterprise Application Platform 7, Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7, Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8, Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9, Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7, Red Hat JBoss Enterprise Application Platform 8, Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8, Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9, Red Hat build of Apache Camel for Spring Boot 3, Red Hat build of Apache Camel - HawtIO 4, Red Hat Build of Keycloak, Red Hat build of Quarkus, Red Hat Data Grid 8, Red Hat Fuse 7, Red Hat Integration Camel K 1, Red Hat JBoss Data Grid 7, Red Hat JBoss Enterprise Application Platform Expansion Pack, Red Hat Process Automation 7, Red Hat Single Sign-On 7

Vulnerable Versions:

0, 2.3.0.Alpha1, 0:1.11.0-1.redhat_00001.1.el7eap, 0:2.4.11-1.Final_redhat_00001.1.el7eap, 0:1.7.2-19.Final_redhat_00020.1.el7eap, 0:2.0.41-5.SP6_redhat_00001.1.el7eap, 0:7.3.15-5.GA_redhat_00003.1.el7eap, 0:2.10.4-4.redhat_00008.1.el7eap, 0:2.10.4-6.redhat_00008.1.el7eap, 0:2.10.4-3.redhat_00008.1.el7eap, 0:1.7.2-20.Final_redhat_00021.1.el7eap, 0:4.1.63-6.Final_redhat_00004.1.el7eap, 0:2.0.41-6.SP7_redhat_00001.1.el7eap, 0:7.3.16-3.GA_redhat_00003.1.el7eap, 0:2.2.33-2.SP2_redhat_00001.1.el8eap, 0:7.4.18-1.GA_redhat_00003.1.el8eap, 0:2.2.33-2.SP2_redhat_00001.1.el9eap, 0:7.4.18-1.GA_redhat_00003.1.el9eap, 0:2.2.33-2.SP2_redhat_00001.1.el7eap, 0:7.4.18-1.GA_redhat_00003.1.el7eap, 0:1.11.9-2.redhat_00001.1.el8eap, 0:800.3.1-2.GA_redhat_00002.1.el8eap, 0:2.3.14-2.SP2_redhat_00001.1.el8eap, 0:8.0.3-13.GA_redhat_00007.1.el8eap, 0:1.11.9-2.redhat_00001.1.el9eap, 0:800.3.1-2.GA_redhat_00002.1.el9eap, 0:2.3.14-2.SP2_redhat_00001.1.el9eap, 0:8.0.3-13.GA_redhat_00007.1.el9eap