CVE-2016-9589

CVE-2016-9589 describes a resource exhaustion vulnerability in Undertow, affecting Red Hat WildFly versions prior to 11.0.0.Beta1. This flaw allows an attacker to trigger a denial of service by exploiting Undertow's HTTP header cache in persistent connections, leading to excessive memory consumption. Rated with a CVSS score of 7.5 (High), this vulnerability is easily exploitable over the network with low attack complexity and no user interaction required, resulting in a high impact on availability. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.