CVE-2021-3629
EUVD-2022-515624.05.2022, 19:15
A flaw was found in Undertow. A potential security issue in flow control handling by the browser over http/2 may potentially cause overhead or a denial of service in the server. The highest threat from this vulnerability is availability. This flaw affects Undertow versions prior to 2.0.40.Final and prior to 2.2.11.Final.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| redhat | integration | - |
| redhat | jboss_enterprise_application_platform | - |
| redhat | single_sign-on | - |
| redhat | undertow | 𝑥 < 2.0.40 |
| redhat | undertow | 2.2.0 ≤ 𝑥 < 2.2.11 |
| redhat | wildfly_core | 𝑥 < 17.0 |
| redhat | jboss_enterprise_application_platform | 7.4 |
| redhat | jboss_enterprise_application_platform | 7.3 |
| netapp | active_iq_unified_manager | - |
| netapp | active_iq_unified_manager | - |
| netapp | active_iq_unified_manager | - |
| netapp | oncommand_insight | - |
| netapp | oncommand_workflow_automation | - |
𝑥
= Vulnerable software versions
Ubuntu Releases