cve/2022/CVE-2022-1319.md

### [CVE-2022-1319](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1319)
![](https://img.shields.io/static/v1?label=Product&message=undertow&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3D%20Fixed%20in%202.3.0.Final%2C%202.2.18.Final%2C%202.2.17.SP3%2C%202.2.17.SP4%2C%202.3.0.Alpha2%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-252%20-%20Unchecked%20Return%20Value.&color=brighgreen)

### Description

A flaw was found in Undertow. For an AJP 400 response, EAP 7 is improperly sending two response packets, and those packets have the reuse flag set even though JBoss EAP closes the connection. A failure occurs when the connection is reused after a 400 by CPING since it reads in the second SEND_HEADERS response packet instead of a CPONG.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/muneebaashiq/MBProjects