OutOfMemoryError in WildFly due to Unbounded GSS Token Decoding

Executive Summary

This vulnerability in WildFly allows a remote unauthenticated attacker to cause a denial of service by sending a specially crafted GSS token. The issue occurs because the CSIv2Util's GSS token decoder reads an attacker-controlled length field without bounds checking and attempts to allocate a very large byte array, leading to an OutOfMemoryError.

Useful 0 Not Useful 0

Detection Guidance

Monitor for OutOfMemoryError or JVM crashes in WildFly logs, especially during IIOP listener operations. Check for repeated GIOP packets with unusually large length fields in network traffic. Use tools like tcpdump or Wireshark to inspect IIOP traffic for malformed tokens.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can cause your WildFly server to crash or become unresponsive due to resource exhaustion. An attacker could repeatedly send malicious packets to keep the server down, disrupting services that rely on WildFly.

Useful 0 Not Useful 0

Mitigation Strategies

Disable the IIOP subsystem in WildFly if not required. Apply vendor patches or updates when available. Restrict network access to the IIOP listener port. Monitor system resources for abnormal memory usage.

Useful 0 Not Useful 0