The vulnerability exists in mod_cluster's AdvertiseListenerImpl (org.jboss.modcluster core module) where a single crafted UDP multicast datagram with a valid HTTP status line and a "Server:" header but missing "Date:", "Digest:", and "Sequence:" headers causes a NullPointerException in the verifyDigest() method. This exception is not caught by the worker thread's handler, resulting in the permanent termination of the advertise listener thread. The failure is silent as isListening() continues to return true, and the condition persists until the affected node is restarted. The crash occurs before the AdvertiseSecurityKey comparison, so deployments with configured security keys remain vulnerable. The impact is a denial-of-service due to loss of advertise listener functionality.

The vulnerability causes a denial-of-service by crashing the advertise listener thread in mod_cluster, which remains down until the node is restarted. This affects availability but does not compromise confidentiality or integrity. The failure is silent, potentially misleading monitoring systems since the listener appears to be active. The issue affects all deployments regardless of security key configuration.

Red Hat recommends disabling multicast-based proxy advertisement and using static proxy configuration instead. If multicast advertisement must be enabled, ensure the multicast network segment (default 224.0.1.105:23364) is properly isolated and inaccessible from untrusted networks. No official patch or fix is indicated in the advisory; mitigation relies on configuration changes and network isolation.