CVE-2020-10705

CVE-2020-10705 describes a denial-of-service vulnerability in Undertow versions prior to 2.1.1.Final, where specially crafted "Expect: 100-continue" headers can trigger an out-of-memory error. This high-severity flaw (CVSS 7.5) is network-exploitable with low attack complexity, potentially leading to a complete denial of service for affected products like NetApp and Red Hat Enterprise Linux and JBoss EAP. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or KEV listing, though it has received minimal community discussion.