CVE-2020-14384

A flaw was found in JBossWeb in versions before 7.5.31.Final-redhat-3. The fix for CVE-2020-13935 was incomplete in JBossWeb, leaving it vulnerable to a denial of service attack when sending multiple requests with invalid payload length in a WebSocket frame. The highest threat from this vulnerability is to system availability.

• CWE-400

• https://bugzilla.redhat.com/show_bug.cgi?id=1875176Issue Tracking, Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1875176Issue Tracking, Vendor Advisory

Published

Sep 9, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-14379A flaw was found in Red Hat AMQ Broker in a way that a XEE a…5.6
• CVE-2020-1438An elevation of privilege vulnerability exists in the way th…7.8
• CVE-2020-14380An account takeover flaw was found in Red Hat Satellite 6.7.…7.5
• CVE-2020-14381A flaw was found in the Linux kernel’s futex implementation.…7.8
• CVE-2020-14382A vulnerability was found in upstream release cryptsetup-2.2…7.8
• CVE-2020-14383A flaw was found in samba's DNS server. An authenticated use…6.5
• CVE-2020-14385A flaw was found in the Linux kernel before 5.9-rc4. A failu…5.5
• CVE-2020-14386A flaw was found in the Linux kernel before 5.9-rc4. Memory …7.8
• CVE-2020-14387A flaw was found in rsync in versions since 3.2.0pre1. Rsync…7.4
• CVE-2020-14388A flaw was found in the Red Hat 3scale API Management Platfo…6.3
• CVE-2020-14389It was found that Keycloak before version 12.0.0 would permi…8.1
• CVE-2020-1439A remote code execution vulnerability exists in PerformanceP…8.8