GHSA-rf6q-vx79-mjxr

ghsaUSosv

Undertow Uncontrolled Resource Consumption

view advisory published 2022-05-25Licence: CC-BY-4.0

A flaw was found in Undertow. A potential security issue in flow control handling by the browser over HTTP/2 may potentially cause overhead or a denial of service in the server. The highest threat from this vulnerability is availability. This flaw affects Undertow versions prior to 2.0.40.Final and prior to 2.2.11.Final.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2021-3629US	medium5.9	1.32% (71st)	—	2022-05-24
A flaw was found in Undertow. A potential security issue in flow control handling by the browser over http/2 may potentially cause overhead or a denial of service in the server. Th…

references

External citations — patches, advisories, analysis.

https://bugzilla.redhat.com/show_bug.cgi?id=1977362WEB
https://github.com/undertow-io/undertowPACKAGE
https://nvd.nist.gov/vuln/detail/CVE-2021-3629ADVISORY
https://security.netapp.com/advisory/ntap-20220729-0008WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan