Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2021-3629

Опубликовано: 29 мар. 2021
Источник: redhat
CVSS3: 5.9
EPSS Низкий

Описание

A flaw was found in Undertow. A potential security issue in flow control handling by the browser over http/2 may potentially cause overhead or a denial of service in the server. The highest threat from this vulnerability is availability. This flaw affects Undertow versions prior to 2.0.40.Final and prior to 2.2.11.Final.

A flaw was found in Undertow. A potential security issue in flow control handling by the browser over http/2 may potentially cause overhead or a denial of service in the server. The highest threat from this vulnerability is availability.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat build of QuarkusundertowNot affected
Red Hat Decision Manager 7undertowNot affected
Red Hat Integration Camel K 1undertowAffected
Red Hat Integration Service RegistryundertowNot affected
Red Hat JBoss Data Grid 7undertowOut of support scope
Red Hat JBoss Fuse 6undertowOut of support scope
Red Hat OpenShift Application RuntimesundertowOut of support scope
Red Hat OpenStack Platform 13 (Queens)opendaylightOut of support scope
Red Hat Process Automation 7undertowNot affected
Red Hat support for Spring BootundertowAffected

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-400
https://bugzilla.redhat.com/show_bug.cgi?id=1977362undertow: potential security issue in flow control over HTTP/2 may lead to DOS

EPSS

Процентиль: 57%
0.00358
Низкий

5.9 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.9
ubuntu
больше 3 лет назад

A flaw was found in Undertow. A potential security issue in flow control handling by the browser over http/2 may potentially cause overhead or a denial of service in the server. The highest threat from this vulnerability is availability. This flaw affects Undertow versions prior to 2.0.40.Final and prior to 2.2.11.Final.

CVSS3: 5.9
nvd
больше 3 лет назад

A flaw was found in Undertow. A potential security issue in flow control handling by the browser over http/2 may potentially cause overhead or a denial of service in the server. The highest threat from this vulnerability is availability. This flaw affects Undertow versions prior to 2.0.40.Final and prior to 2.2.11.Final.

CVSS3: 5.9
debian
больше 3 лет назад

A flaw was found in Undertow. A potential security issue in flow contr ...

CVSS3: 7.5
github
больше 3 лет назад

Undertow Uncontrolled Resource Consumption

EPSS

Процентиль: 57%
0.00358
Низкий

5.9 Medium

CVSS3