medium5.9
CVE-2021-3597
A flaw was found in undertow.
Impact
A flaw was found in undertow. The HTTP2SourceChannel fails to write the final frame under some circumstances, resulting in a denial of service. The highest threat from this vulnerability is availability. This flaw affects Undertow versions prior to 2.0.35.SP1, prior to 2.2.6.SP1, prior to 2.2.7.SP1, prior to 2.0.36.SP1, prior to 2.2.9.Final and prior to 2.0.39.Final.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Redhat | Fuse | Version 1.0 |
| Redhat | Jboss Enterprise Application Platform | All versions Versions 7.3, 7.4 |
| Redhat | Openshift Application Runtimes | All versions |
| Redhat | Single Sign-On | All versions |
| Redhat | Undertow | before 2.0.35 from 2.2.0 before 2.2.6 Versions 2.0.35, 2.0.36, 2.0.39, 2.2.6 |
| Netapp | Active Iq Unified Manager | All versions |
| Netapp | Oncommand Insight | All versions |
| Netapp | Oncommand Workflow Automation | All versions |