CVE-2026-15565: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in Red Hat Red Hat build of Apache Camel for Spring Boot 4
A flaw was found in Undertow. A remote attacker can cause Out of Memory on websockets endpoint without authentication on any @ServerEndpoint class that has any @OnMessage method. This allows an attacker to cause Denial of Service attack without authentication and using only a standard WebSocket handshake.
AI Analysis
Technical Summary
A buffer copy without checking the size of input (classic buffer overflow, CWE-120) exists in Undertow, a component used in the Red Hat build of Apache Camel for Spring Boot 4. This flaw allows a remote attacker to cause an Out of Memory condition on WebSocket endpoints that have any @ServerEndpoint class with an @OnMessage method, without requiring authentication. The attack leverages a standard WebSocket handshake to trigger a denial of service by exhausting memory resources. Red Hat's advisory provides configuration-based mitigations to disable WebSocket handshakes either globally or per application. No official patch or fix has been released yet, and the vulnerability is rated high severity with a CVSS 3.1 score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).
Potential Impact
The vulnerability allows unauthenticated remote attackers to cause a denial of service by exhausting memory on affected WebSocket endpoints, leading to service unavailability. There is no impact on confidentiality or integrity. The attack requires only a standard WebSocket handshake and no privileges or user interaction, making it relatively easy to exploit for DoS purposes.
Mitigation Recommendations
Red Hat advisory recommends two mitigation options: (1) Disable WebSocket handshake server-wide by removing the <websockets/> element from the standalone.xml servlet-container configuration, which prevents any WebSocket upgrade requests from being accepted; (2) Disable WebSocket handshake per application by setting <enable-websockets>false</enable-websockets> in the WEB-INF/jboss-web.xml of the specific WAR, preventing registration of @ServerEndpoint classes in that deployment. No official patch or fix is currently available; patch status is not yet confirmed — check the Red Hat advisory for updates.
CVE-2026-15565: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') in Red Hat Red Hat build of Apache Camel for Spring Boot 4
Description
A flaw was found in Undertow. A remote attacker can cause Out of Memory on websockets endpoint without authentication on any @ServerEndpoint class that has any @OnMessage method. This allows an attacker to cause Denial of Service attack without authentication and using only a standard WebSocket handshake.
CVSS v3.1
Score 7.5high
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
A buffer copy without checking the size of input (classic buffer overflow, CWE-120) exists in Undertow, a component used in the Red Hat build of Apache Camel for Spring Boot 4. This flaw allows a remote attacker to cause an Out of Memory condition on WebSocket endpoints that have any @ServerEndpoint class with an @OnMessage method, without requiring authentication. The attack leverages a standard WebSocket handshake to trigger a denial of service by exhausting memory resources. Red Hat's advisory provides configuration-based mitigations to disable WebSocket handshakes either globally or per application. No official patch or fix has been released yet, and the vulnerability is rated high severity with a CVSS 3.1 score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).
Potential Impact
The vulnerability allows unauthenticated remote attackers to cause a denial of service by exhausting memory on affected WebSocket endpoints, leading to service unavailability. There is no impact on confidentiality or integrity. The attack requires only a standard WebSocket handshake and no privileges or user interaction, making it relatively easy to exploit for DoS purposes.
Mitigation Recommendations
Red Hat advisory recommends two mitigation options: (1) Disable WebSocket handshake server-wide by removing the <websockets/> element from the standalone.xml servlet-container configuration, which prevents any WebSocket upgrade requests from being accepted; (2) Disable WebSocket handshake per application by setting <enable-websockets>false</enable-websockets> in the WEB-INF/jboss-web.xml of the specific WAR, preventing registration of @ServerEndpoint classes in that deployment. No official patch or fix is currently available; patch status is not yet confirmed — check the Red Hat advisory for updates.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- redhat
- Date Reserved
- 2026-07-13T05:42:33.770Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- null
- Vendor Advisory Urls
- [{"url":"https://access.redhat.com/security/cve/CVE-2026-15565","vendor":"Red Hat"}]
Threat ID: 6a7ae75fbf8831d539789ae7
Added to database: 08/11/2026, 09:11:59 UTC
Last enriched: 08/11/2026, 09:26:39 UTC
Last updated: 08/12/2026, 00:41:10 UTC
Views: 9
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.