QwikSec

Security Database

CVE

CWE

Training

CVE-2021-3629

Published: May 24, 2022

Modified: Aug 3, 2024

PUBLISHED

Description

A flaw was found in Undertow. A potential security issue in flow control handling by the browser over http/2 may potentially cause overhead or a denial of service in the server. The highest threat from this vulnerability is availability. This flaw affects Undertow versions prior to 2.0.40.Final and prior to 2.2.11.Final.

Vendor	Product	Versions
n/a	undertow	affected `undertow 2.0.40.Final, undertow 2.2.11.Final`

Weaknesses (CWE)

References

https://bugzilla.redhat.com/show_bug.cgi?id=1977362

x_refsource_MISC

https://security.netapp.com/advisory/ntap-20220729-0008/

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.