Threats Tagged 'cve-2026-15567'

CVE-2026-15567 is a denial of service vulnerability in Red Hat JBoss Enterprise Application Platform 7.4.25, caused by an unchecked length field in the CSIv2Util's GSS token decoder of Wildfly. A remote unauthenticated attacker can exploit this flaw to trigger an OutOfMemoryError by forcing the application to allocate an excessively large byte array. This vulnerability does not impact confidentiality or integrity but can cause service disruption due to resource exhaustion. Red Hat has released a security update addressing this issue in version 7.4.25. The vulnerability has a CVSS v3.1 base score of 7.5 (high severity). No known exploits in the wild have been reported.

A flaw was found in Wildfly. A remote unauthenticated attacker can trigger OutOfMemoryError as CSIv2Util's GSS token decoder reads an attacker-controlled length field without bounds checking and attempts to allocate a byte array of that size.