io.undertow:undertow-http2-test-suite (1.3.2.final), io.undertow:undertow-servlet (1.3.2.final) +1 more potentially affected by CVE-2022-2053 via io.undertow:undertow-core (1.3.2.final)

io.undertow:undertow-core MAVEN version 1.3.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.3.2.final - io.undertow:undertow-servlet 1.3.2.final -...

CVE-2022-35236

In BIG-IP Versions 16.1.x before 16.1.2.2, 15.1.x before 15.1.6.1, and 14.1.x before 14.1.5, when an HTTP2 profile is configured on a virtual server, undisclosed traffic can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support EoTS...

Design/Logic Flaw

In BIG-IP Versions 16.1.x before 16.1.2.2, 15.1.x before 15.1.6.1, and 14.1.x before 14.1.5, when an HTTP2 profile is configured on a virtual server, undisclosed traffic can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support EoTS...

CVE-2022-35236 HTTP2 profile vulnerability CVE-2022-35236

In BIG-IP Versions 16.1.x before 16.1.2.2, 15.1.x before 15.1.6.1, and 14.1.x before 14.1.5, when an HTTP2 profile is configured on a virtual server, undisclosed traffic can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support EoTS...

CVE-2022-35236

CVE-2022-35236 affects BIG-IP HTTP2 profile when configured on a virtual server, allowing undisclosed traffic to cause increased memory utilization and potential DoS. Affected versions: BIG-IP 16.1.x before 16.1.2.2, 15.1.x before 15.1.6.1, 14.1.x before 14.1.5. Fixes were introduced in 16.1.2.2,...

CVE-2022-35236: Uncontrolled Resource Consumption

In BIG-IP Versions 16.1.x before 16.1.2.2, 15.1.x before 15.1.6.1, and 14.1.x before 14.1.5, when an HTTP2 profile is configured on a virtual server, undisclosed traffic can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support EoTS...

PT-2022-22645 · F5 · Big-Ip

Name of the Vulnerable Software and Affected Versions: BIG-IP versions 14.1.x through 14.1.5 BIG-IP versions 15.1.x through 15.1.6.1 BIG-IP versions 16.1.x through 16.1.2.2 Description: When an HTTP2 profile is configured on a virtual server, undisclosed traffic can cause an increase in memory...

F5 Networks BIG-IP : HTTP2 profile vulnerability (K79933541)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.5 / 15.1.6.1 / 16.1.2.2 / 17.0.0. It is, therefore, affected by a vulnerability as referenced in the K79933541 advisory. - In BIG-IP Versions 16.1.x before 16.1.2.2, 15.1.x before 15.1.6.1, and 14.1.x before 14.1.5,...

F5 BIG-IP HTTP2 profile denial of service vulnerability

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. A denial of service vulnerability exists in the F5 BIG-IP HTTP2 profile, which stems from the fact that when configuring the...

GO-2022-0288 Unbounded memory growth in net/http and golang.org/x/net/http2

An attacker can cause unbounded memory growth in servers accepting HTTP/2 requests...

GHSA-339Q-62WM-C39W Undertow vulnerable to Denial of Service (DoS) attacks

Undertow client side invocation timeout raised when calling over HTTP2, this vulnerability can allow attacker to carry out denial of service DoS attacks in versions less than 2.2.15 Final...

io.undertow:undertow-http2-test-suite (1.2.1.final), io.undertow:undertow-servlet (1.2.1.final) +1 more potentially affected by CVE-2021-3859 via io.undertow:undertow-core (1.2.1.final)

io.undertow:undertow-core MAVEN version 1.2.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.2.1.final - io.undertow:undertow-servlet 1.2.1.final -...

io.undertow:undertow-http2-test-suite (1.2.3.final), io.undertow:undertow-servlet (1.2.3.final) +2 more potentially affected by CVE-2021-3859 via io.undertow:undertow-core (1.2.3.final)

io.undertow:undertow-core MAVEN version 1.2.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.2.3.final - io.undertow:undertow-servlet 1.2.3.final -...

io.undertow:undertow-http2-test-suite (1.2.0.beta4), io.undertow:undertow-servlet (1.2.0.beta4) +2 more potentially affected by CVE-2021-3859 via io.undertow:undertow-core (1.2.0.beta4)

io.undertow:undertow-core MAVEN version 1.2.0.beta4 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.2.0.beta4 - io.undertow:undertow-servlet 1.2.0.beta4 -...

io.undertow:undertow-http2-test-suite (1.3.0.beta12), io.undertow:undertow-servlet (1.3.0.beta12) +1 more potentially affected by CVE-2021-3859 via io.undertow:undertow-core (1.3.0.beta12)

io.undertow:undertow-core MAVEN version 1.3.0.beta12 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.3.0.beta12 - io.undertow:undertow-servlet 1.3.0.beta12 -...

io.undertow:undertow-http2-test-suite (1.3.0.cr3), io.undertow:undertow-servlet (1.3.0.cr3) +1 more potentially affected by CVE-2021-3859 via io.undertow:undertow-core (1.3.0.cr3)

io.undertow:undertow-core MAVEN version 1.3.0.cr3 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.3.0.cr3 - io.undertow:undertow-servlet 1.3.0.cr3 -...

io.undertow:undertow-http2-test-suite (1.3.0.beta3), io.undertow:undertow-servlet (1.3.0.beta3) +32 more potentially affected by CVE-2021-3859 via io.undertow:undertow-core (1.3.0.beta3)

io.undertow:undertow-core MAVEN version 1.3.0.beta3 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.3.0.beta3 - io.undertow:undertow-servlet 1.3.0.beta3 -...

io.undertow:undertow-http2-test-suite (1.3.0.beta1), io.undertow:undertow-servlet (1.3.0.beta1) +2 more potentially affected by CVE-2021-3859 via io.undertow:undertow-core (1.3.0.beta1)

io.undertow:undertow-core MAVEN version 1.3.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.3.0.beta1 - io.undertow:undertow-servlet 1.3.0.beta1 -...

io.undertow:undertow-http2-test-suite (1.2.0.final), io.undertow:undertow-servlet (1.2.0.final) +2 more potentially affected by CVE-2021-3859 via io.undertow:undertow-core (1.2.0.final)

io.undertow:undertow-core MAVEN version 1.2.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.2.0.final - io.undertow:undertow-servlet 1.2.0.final -...

io.undertow:undertow-http2-test-suite (1.2.2.final), io.undertow:undertow-servlet (1.2.2.final) +2 more potentially affected by CVE-2021-3859 via io.undertow:undertow-core (1.2.2.final)

io.undertow:undertow-core MAVEN version 1.2.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.2.2.final - io.undertow:undertow-servlet 1.2.2.final -...