Description

A flaw was found in undertow. The HTTP2SourceChannel fails to write the final frame under some circumstances, resulting in a denial of service. The highest threat from this vulnerability is availability. This flaw affects Undertow versions prior to 2.0.35.SP1, prior to 2.2.6.SP1, prior to 2.2.7.SP1, prior to 2.0.36.SP1, prior to 2.2.9.Final and prior to 2.0.39.Final.

Remediation

References

CVE-2021-3597

Related Vulnerabilities

WordPress Plugin Maintenance Mode Unspecified Vulnerability (1.3.3)

WordPress Plugin JVM WooCommerce Wishlist Unspecified Vulnerability (1.2.6)

Coppermine Cross-site Scripting (XSS) Vulnerability (CVE-2018-14478)

WordPress Plugin Anti-Malware Security and Brute-Force Firewall Multiple Cross-Site Scripting Vulnerabilities (4.15.17)

WordPress Plugin All in One SEO-Best WordPress SEO-Easily Improve SEO Rankings & Increase Traffic Multiple Cross-Site Scripting Vulnerabilities (4.2.9)

Severity

Medium

Classification

CVE-2021-3597 CWE-362 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Missing Update Known Vulnerabilities