Launchpad.net

CVE 2017-2670

It was found in Undertow before 1.3.28 that with non-clean TCP close, the Websocket server gets into infinite loop on every IO thread, effectively causing DoS.

See the CVE page on Mitre.org for more details.

References