CVEvulnerability

CVE-2021-3629

5.9 MEDIUM Published 2022-05-24 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-05-24
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.9 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:N/A:P
Weaknesses
CWE-400

Description

A flaw was found in Undertow. A potential security issue in flow control handling by the browser over http/2 may potentially cause overhead or a denial of service in the server. The highest threat from this vulnerability is availability. This flaw affects Undertow versions prior to 2.0.40.Final and prior to 2.2.11.Final.

Affected configurations

• redhat integration • redhat jboss enterprise application platform • redhat single sign-on • redhat undertow (< 2.0.40) • redhat undertow (>= 2.2.0 < 2.2.11) • redhat wildfly core (< 17.0) • redhat jboss enterprise application platform 7.4 • redhat jboss enterprise application platform 7.3 • netapp active iq unified manager • netapp oncommand insight • netapp oncommand workflow automation

Related

Weakness · CWE (1)

  • CWE-400 Uncontrolled Resource Consumption weakness

References