Wildfly: no timeout for eap management interface may lead to denial of service (dos)

Description

A vulnerability was found in Wildfly’s management interface. Due to the lack of limitation of sockets for the management interface, it may be possible to cause a denial of service hitting the nofile limit as there is no possibility to configure or set a maximum number of connections.

Scores

EPSS (exploitation in 30 days)

0.28% · top 80% of all CVEs (6 Nov 2026)

CISA SSVC

Exploitation: none · Automatable: no · Technical impact: partial

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 4.1.

Weakness

• CWE-770: Allocation of Resources Without Limits or Throttling (opens in a new tab)All about CWE-770 and its CVEs

Affected products

• wildfly

  • affected < 24.0.1.Final
  • unaffected 25.0.0.Final – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform

  • unaffected 15.0.39.Final-redhat-00001 – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8

  • unaffected 0:3.3.24-1.Final_redhat_00001.1.el8eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8

  • unaffected 0:6.0.23-2.SP1_redhat_00001.1.el8eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8

  • unaffected 0:1.1.3-1.redhat_00001.1.el8eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8

  • unaffected 0:1.5.18-1.Final_redhat_00001.1.el8eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8

  • unaffected 0:1.1.3-1.redhat_00001.1.el8eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8

  • unaffected 0:4.0.55-1.Final_redhat_00001.1.el8eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8

  • unaffected 0:1.10.0-39.Final_redhat_00039.1.el8eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8

  • unaffected 0:5.4.12-1.Final_redhat_00001.1.el8eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8

  • unaffected 0:1.15.4-1.redhat_00003.1.el8eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8

  • unaffected 0:2.0.15-1.Final_redhat_00001.1.el8eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8

  • unaffected 0:7.4.19-1.GA_redhat_00002.1.el8eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8

  • unaffected 0:2.7.1-37.redhat_00015.1.el8eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9

  • unaffected 0:3.3.24-1.Final_redhat_00001.1.el9eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9

  • unaffected 0:6.0.23-2.SP1_redhat_00001.1.el9eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9

  • unaffected 0:1.1.3-1.redhat_00001.1.el9eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9

  • unaffected 0:1.5.18-1.Final_redhat_00001.1.el9eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9

  • unaffected 0:1.1.3-1.redhat_00001.1.el9eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9

  • unaffected 0:4.0.55-1.Final_redhat_00001.1.el9eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9

  • unaffected 0:1.10.0-39.Final_redhat_00039.1.el9eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9

  • unaffected 0:5.4.12-1.Final_redhat_00001.1.el9eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9

  • unaffected 0:1.15.4-1.redhat_00003.1.el9eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9

  • unaffected 0:2.0.15-1.Final_redhat_00001.1.el9eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9

  • unaffected 0:7.4.19-1.GA_redhat_00002.1.el9eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 9

  • unaffected 0:2.7.1-37.redhat_00015.1.el9eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7

  • unaffected 0:3.3.24-1.Final_redhat_00001.1.el7eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7

  • unaffected 0:6.0.23-2.SP1_redhat_00001.1.el7eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7

  • unaffected 0:1.1.3-1.redhat_00001.1.el7eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7

  • unaffected 0:1.5.18-1.Final_redhat_00001.1.el7eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7

  • unaffected 0:1.1.3-1.redhat_00001.1.el7eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7

  • unaffected 0:4.0.55-1.Final_redhat_00001.1.el7eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7

  • unaffected 0:1.10.0-39.Final_redhat_00039.1.el7eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7

  • unaffected 0:5.4.12-1.Final_redhat_00001.1.el7eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7

  • unaffected 0:1.15.4-1.redhat_00003.1.el7eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7

  • unaffected 0:2.0.15-1.Final_redhat_00001.1.el7eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7

  • unaffected 0:7.4.19-1.GA_redhat_00002.1.el7eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7

  • unaffected 0:2.7.1-37.redhat_00015.1.el7eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8

  All versions: unaffected

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8

  • unaffected 0:2.33.0-1.redhat_00015.1.el8eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8

  • unaffected 1:2.0.0-2.redhat_00005.1.el8eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8

  • unaffected 0:1.8.0-2.redhat_00001.1.el8eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8

  • unaffected 0:2.2.0-2.redhat_00001.1.el8eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8

  • unaffected 0:1.16.1-2.redhat_00007.1.el8eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8

  • unaffected 0:3.2.2-28.redhat_2.1.el8eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8

  • unaffected 0:2.15.1-1.redhat_00001.1.el8eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8

  • unaffected 0:3.14.0-2.redhat_00006.1.el8eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8

  • unaffected 0:4.0.5-1.redhat_00001.1.el8eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8

  • unaffected 1:2.0.0-2.redhat_00005.1.el8eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8

  • unaffected 0:2.0.1-1.redhat_00002.1.el8eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8

  • unaffected 0:0.1.0-2.redhat_00010.1.el8eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8

  • unaffected 0:1.12.284-2.redhat_00002.1.el8eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8

  • unaffected 0:1.2.5-2.redhat_00001.1.el8eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8

  • unaffected 0:800.4.0-1.GA_redhat_00001.1.el8eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8

  • unaffected 0:2.1.0-4.redhat_00001.1.el8eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8

  • unaffected 0:6.2.31-1.Final_redhat_00002.1.el8eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8

  • unaffected 0:8.0.1-3.Final_redhat_00001.1.el8eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8

  • unaffected 0:0.8.1-2.redhat_00001.1.el8eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8

  • unaffected 0:1.1.3-1.redhat_00001.1.el8eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8

  • unaffected 0:3.0.1-1.redhat_00001.1.el8eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8

  • unaffected 0:1.1.3-1.redhat_00001.1.el8eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8

  • unaffected 0:3.5.3-1.Final_redhat_00001.1.el8eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8

  • unaffected 0:4.0.2-1.redhat_00001.1.el8eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8

  • unaffected 0:5.3.10-1.Final_redhat_00001.1.el8eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8

  • unaffected 0:2.22.1-1.redhat_00002.1.el8eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8

  • unaffected 0:6.0.3-1.Final_redhat_00001.1.el8eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8

  • unaffected 0:9.37.3-1.redhat_00001.1.el8eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8

  • unaffected 0:9.6.0-1.redhat_00002.1.el8eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8

  • unaffected 0:2.3.0-1.redhat_00001.1.el8eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8

  • unaffected 0:2.0.1-3.Final_redhat_00001.1.el8eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8

  • unaffected 0:3.0.1-2.Final_redhat_00001.1.el8eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8

  • unaffected 0:3.0.4-1.redhat_00001.1.el8eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8

  • unaffected 0:8.0.0-6.redhat_00001.1.el8eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8

  • unaffected 0:2.0.16-1.redhat_00001.1.el8eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8

  • unaffected 0:2.2.0-1.redhat_00001.1.el8eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 8

  • unaffected 0:8.0.4-2.GA_redhat_00005.1.el8eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9

  • unaffected 0:2.33.0-1.redhat_00015.1.el9eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9

  • unaffected 1:2.0.0-2.redhat_00005.1.el9eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9

  • unaffected 0:1.8.0-2.redhat_00001.1.el9eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9

  • unaffected 0:2.2.0-2.redhat_00001.1.el9eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9

  • unaffected 0:1.16.1-2.redhat_00007.1.el9eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9

  • unaffected 0:3.2.2-28.redhat_2.1.el9eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9

  • unaffected 0:2.15.1-1.redhat_00001.1.el9eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9

  • unaffected 0:3.14.0-2.redhat_00006.1.el9eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9

  • unaffected 0:4.0.5-1.redhat_00001.1.el9eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9

  • unaffected 1:2.0.0-2.redhat_00005.1.el9eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9

  • unaffected 0:2.0.1-1.redhat_00002.1.el9eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9

  • unaffected 0:0.1.0-2.redhat_00010.1.el9eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9

  • unaffected 0:1.12.284-2.redhat_00002.1.el9eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9

  • unaffected 0:1.2.5-2.redhat_00001.1.el9eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9

  • unaffected 0:800.4.0-1.GA_redhat_00001.1.el9eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9

  • unaffected 0:2.1.0-4.redhat_00001.1.el9eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9

  • unaffected 0:6.2.31-1.Final_redhat_00002.1.el9eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9

  • unaffected 0:8.0.1-3.Final_redhat_00001.1.el9eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9

  • unaffected 0:0.8.1-2.redhat_00001.1.el9eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9

  • unaffected 0:1.1.3-1.redhat_00001.1.el9eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9

  • unaffected 0:3.0.1-1.redhat_00001.1.el9eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9

  • unaffected 0:1.1.3-1.redhat_00001.1.el9eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9

  • unaffected 0:3.5.3-1.Final_redhat_00001.1.el9eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9

  • unaffected 0:4.0.2-1.redhat_00001.1.el9eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9

  • unaffected 0:5.3.10-1.Final_redhat_00001.1.el9eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9

  • unaffected 0:2.22.1-1.redhat_00002.1.el9eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9

  • unaffected 0:6.0.3-1.Final_redhat_00001.1.el9eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9

  • unaffected 0:9.37.3-1.redhat_00001.1.el9eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9

  • unaffected 0:9.6.0-1.redhat_00002.1.el9eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9

  • unaffected 0:2.3.0-1.redhat_00001.1.el9eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9

  • unaffected 0:2.0.1-3.Final_redhat_00001.1.el9eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9

  • unaffected 0:3.0.1-2.Final_redhat_00001.1.el9eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9

  • unaffected 0:3.0.4-1.redhat_00001.1.el9eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9

  • unaffected 0:8.0.0-6.redhat_00001.1.el9eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9

  • unaffected 0:2.0.16-1.redhat_00001.1.el9eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9

  • unaffected 0:2.2.0-1.redhat_00001.1.el9eap – < *

• Red Hat · Red Hat JBoss Enterprise Application Platform 8.0 for RHEL 9

  • unaffected 0:8.0.4-2.GA_redhat_00005.1.el9eap – < *

• Red Hat · Red Hat Build of Keycloak

  All versions: unaffected

• Red Hat · Red Hat Data Grid 8

  All versions: unaffected

• Red Hat · Red Hat Fuse 7

  All versions: unknown

• Red Hat · Red Hat JBoss Data Grid 7

  All versions: unknown

• Red Hat · Red Hat JBoss Enterprise Application Platform Expansion Pack

  All versions: unaffected

• Red Hat · Red Hat Process Automation 7

  All versions: unknown

• Red Hat · Red Hat Single Sign-On 7

  All versions: affected

Affected packages

From reviewed advisories of the GitHub Advisory Database.

• Mavenorg.wildfly:wildfly-domain-httpGHSA-x7g6-rwhc-g7mj (opens in a new tab)

What to do

Workaround: Currently there is no available mitigation for this vulnerability. Please make sure to perform updates as they become available.

References (12)

• RHSA-2024:8075 (opens in a new tab)vendor-advisoryx_refsource_REDHAT
• RHSA-2024:8076 (opens in a new tab)vendor-advisoryx_refsource_REDHAT
• RHSA-2024:8077 (opens in a new tab)vendor-advisoryx_refsource_REDHAT
• RHSA-2024:8080 (opens in a new tab)vendor-advisoryx_refsource_REDHAT
• RHSA-2024:8823 (opens in a new tab)vendor-advisoryx_refsource_REDHAT
• RHSA-2024:8824 (opens in a new tab)vendor-advisoryx_refsource_REDHAT
• RHSA-2024:8826 (opens in a new tab)vendor-advisoryx_refsource_REDHAT
• https://access.redhat.com/security/cve/CVE-2024-4029 (opens in a new tab)vdb-entryx_refsource_REDHATx_transferred
• RHBZ#2278615 (opens in a new tab)issue-trackingx_refsource_REDHATx_transferred
• https://github.com/advisories/GHSA-x7g6-rwhc-g7mj (opens in a new tab)
• https://github.com/wildfly/wildfly/pull/17914 (opens in a new tab)
• https://github.com/wildfly/wildfly/pull/17935 (opens in a new tab)

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisory GHSA-x7g6-rwhc-g7mj (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2024-4029](https://trackcve.app/badge/CVE-2024-4029.svg)](https://trackcve.app/cve/CVE-2024-4029)

Record last updated 6 Nov 2026, 14:19 UTC.