CVE:CVE-2019-19343
CNNVD:CNNVD-202006-1060
Red Hat Undertow是美国红帽（Red Hat）公司的一款基于Java的嵌入式Web服务器，是Wildfly（Java应用服务器）默认的Web服务器。
Red Hat Undertow中的HttpOpenListener存在资源管理错误漏洞，该漏洞源于远程连接会一直保持连接状态。攻击者可利用该漏洞导致拒绝服务（内存泄露）。
solution:Upgrade redhat jboss-remoting to a higher version than 5.0.14,5.0.14,and avoid the version (,5.0.14),5.0.14; Upgrade redhat jboss_enterprise_application_platform to a higher version than 7.2.4,and avoid the version (,7.2.4); Upgrade redhat undertow to a higher version than 2.0.25,2.0.25,and avoid the version (,2.0.25),2.0.25; Upgrade netapp active_iq_unified_manager to a higher version than -