There exists a security vulnerability in Undertow that can cause remote DoS attacks. When server uses method 
 FormEncodedDataDefinition.doParse(StreamSourceChannel) to parse large form data encoding with application/x-www-form-urlencoded, the method will cause OutOfMemory. This vulnerability can be exploited by unauthorized users to cause remote denial-of-service (DoS) attack. 


This happens because there is no size limit for this method hence a large request may jeopardize the environment leading to DoS.