CVE-2021-3629

A flaw was found in Undertow. A potential security issue in flow control handling by the browser over http/2 may potentially cause overhead or a denial of service in the server. The highest threat from this vulnerability is availability. This flaw affects Undertow versions prior to 2.0.40.Final and prior to 2.2.11.Final.

Score

CVSS 3.1 5.9 Medium

Status

Modified - secalert@redhat.com

Published

2022-05-24

Last modified

2024-08-03

Weaknesses

CWE-400

Affected products

• Active Iq Unified Manager (Netapp)
• Oncommand Insight (Netapp)
• Oncommand Workflow Automation (Netapp)
• Integration (Redhat)
• Jboss Enterprise Application Platform (Redhat)
• Single Sign-on (Redhat)
• Undertow (Redhat)
• Wildfly Core (Redhat)

References

• https://bugzilla.redhat.com/show_bug.cgi?id=1977362
• https://security.netapp.com/advisory/ntap-20220729-0008/