Lucene search
HistoryAug 31, 2022 - 4:15 p.m.
CVE-2022-1259
undertow
http/2
flow control
denial of service
cve-2022-1259
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
46.4%
A flaw was found in Undertow. A potential security issue in flow control handling by the browser over HTTP/2 may cause overhead or a denial of service in the server. This flaw exists because of an incomplete fix for CVE-2021-3629.
Affected configurations
Node
redhatbuild_of_quarkusMatch-
ORredhatintegration_camel_kMatch-
ORredhatjboss_enterprise_application_platformMatch7.0.0
ORredhatopenshift_application_runtimesMatch-
ORredhatsingle_sign-onMatch7.0
ORredhatundertowRange≤2.2.17
ORredhatundertowMatch2.2.18
ORredhatundertowMatch2.2.19
Node
netappactive_iq_unified_managerMatch-linux
ORnetappactive_iq_unified_managerMatch-vmware_vsphere
ORnetappactive_iq_unified_managerMatch-windows
ORnetappcloud_secure_agentMatch-
ORnetapponcommand_insightMatch-
ORnetapponcommand_workflow_automationMatch-
Related
ubuntucve
ubuntucve
CVE-2022-1259
2022-08-31 00:00:00
CVE-2021-3629
2022-05-24 00:00:00
cvelist
cvelist
CVE-2022-1259
2022-08-31 00:00:00
CVE-2021-3629
2022-05-24 18:19:00
osv
osv
CVE-2022-1259
2022-08-31 16:15:09
CVE-2021-3629
2022-05-24 19:15:09
Undertow Uncontrolled Resource Consumption
2022-05-25 00:00:22
debiancve
debiancve
CVE-2022-1259
2022-08-31 16:15:09
CVE-2021-3629
2022-05-24 19:15:09
cve
cve
CVE-2022-1259
2022-08-31 16:15:09
CVE-2021-3629
2022-05-24 19:15:09
veracode
veracode
Denial Of Service (DoS)
2022-10-05 22:30:11
Denial Of Service (DoS)
2021-11-28 00:41:41
redhatcve
redhatcve
CVE-2022-1259
2022-04-06 13:21:25
CVE-2021-3629
2022-05-07 14:04:12
prion
prion
Design/Logic Flaw
2022-08-31 16:15:00
Denial of service
2022-05-24 19:15:00
nessus
nessus
redhat
redhat
github
github
Undertow Uncontrolled Resource Consumption
2022-05-25 00:00:22
nvd
nvd
CVE-2021-3629
2022-05-24 19:15:09
ibm
ibm
oracle
oracle
Oracle Critical Patch Update Advisory - January 2023
2023-01-17 00:00:00
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
46.4%
Related for NVD:CVE-2022-1259