Lucene search
HistoryAug 23, 2022 - 4:15 p.m.
CVE-2021-3690
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
47.4%
A flaw was found in Undertow. A buffer leak on the incoming WebSocket PONG message may lead to memory exhaustion. This flaw allows an attacker to cause a denial of service. The highest threat from this vulnerability is availability.
Affected configurations
Node
redhatfuseMatch1.0
ORredhatintegration_camel_kMatch-
ORredhatintegration_camel_quarkusMatch-
ORredhatjboss_enterprise_application_platformMatch-text-only
ORredhatopenshift_application_runtimesMatch-text-only
ORredhatsingle_sign-onMatch-text-only
ORredhatundertowRange<2.0.40
ORredhatundertowRange2.1.0–2.2.10
Node
redhatjboss_enterprise_application_platformMatch7.3
redhatenterprise_linuxMatch6.0
ORredhatenterprise_linuxMatch7.0
ORredhatenterprise_linuxMatch8.0
Node
redhatjboss_enterprise_application_platformMatch7.4
redhatenterprise_linuxMatch7.0
ORredhatenterprise_linuxMatch8.0
Related
cvelist
cvelist
CVE-2021-3690
2022-08-23 15:50:35
ubuntucve
ubuntucve
CVE-2021-3690
2022-08-23 00:00:00
redhat
redhat
prion
prion
Design/Logic Flaw
2022-08-23 16:15:00
nessus
nessus
osv
osv
Undertow vulnerable to memory exhaustion due to buffer leak
2022-07-15 21:07:20
CVE-2021-3690
2022-08-23 16:15:09
cve
cve
CVE-2021-3690
2022-08-23 16:15:09
redhatcve
redhatcve
CVE-2021-3690
2021-08-09 01:56:47
github
github
Undertow vulnerable to memory exhaustion due to buffer leak
2022-07-15 21:07:20
debiancve
debiancve
CVE-2021-3690
2022-08-23 16:15:09
oracle
oracle
Oracle Critical Patch Update Advisory - April 2022
2022-04-19 00:00:00
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
47.4%
Related for NVD:CVE-2021-3690