CVE-2021-3859

🗓️ 26 Aug 2022 00:00:00Reported by redhatType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 263 Views

A flaw in Undertow tripped client-side invocation timeout over HTTP2 leading to denial of service attacks

Reporter	Title	Published	Views	Family All 61
Circl	CVE-2021-3859	26 Aug 202220:30	–	circl
CNNVD	Red Hat Undertow 资源管理错误漏洞	1 Feb 202200:00	–	cnnvd
Cvelist	CVE-2021-3859	26 Aug 202200:00	–	cvelist
Debian CVE	CVE-2021-3859	26 Aug 202200:00	–	debiancve
EUVD	EUVD-2022-6212	3 Oct 202520:07	–	euvd
Github Security Blog	Undertow vulnerable to Denial of Service (DoS) attacks	15 Jul 202221:32	–	github
NCSC	Vulnerabilities fixed in Red Hat JBoss Enterprise Application Platform	3 Feb 202200:00	–	ncsc
NVD	CVE-2021-3859	26 Aug 202216:15	–	nvd
OSV	CVE-2021-3859	26 Aug 202216:15	–	osv
OSV	DEBIAN-CVE-2021-3859	26 Aug 202216:15	–	osv

NVD

Vulners

Node

redhat jboss_enterprise_application_platformMatch7.3

redhat jboss_enterprise_application_platformMatch7.4

redhat single_sign-onMatch7.4.10

redhat single_sign-onMatch7.5.1

redhat undertowRange<2.2.15

Node

netapp cloud_secure_agentMatch-

netapp oncommand_insightMatch-

netapp oncommand_workflow_automationMatch-

[
  {
    "vendor": "n/a",
    "product": "undertow",
    "versions": [
      {
        "version": "Fixed in 2.2.15.Final",
        "status": "affected"
      }
    ]
  }
]

Source	Link
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
security	www.security.netapp.com/advisory/ntap-20221201-0004/
access	www.access.redhat.com/security/cve/CVE-2021-3859
issues	www.issues.redhat.com/browse/UNDERTOW-1979
github	www.github.com/undertow-io/undertow/pull/1296
github	www.github.com/undertow-io/undertow/commit/e43f0ada3f4da6e8579e0020cec3cb1a81e487c2

21 Nov 2024 06:22Current

7.1High risk

Vulners AI Score7.1

CVSS 3.17.5

EPSS0.00258