REDHAT-BUG-2072339: Medium severity undertow vulnerability

Published Apr 6, 2022

Updated

A flaw was found in Undertow where a potential security issue in flow control handling by browser over HTTP/2 may potentially cause overhead or DOS in the server. The highest impact of this vulnerability is availability.(incomplete fix for CVE-2021-3629)

Affected Software

1 affected component

Red Hat Undertow

Event History

Apr 6, 2022

Data Sourced

via Red Hat·04:14 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-2072339?

The severity of REDHAT-BUG-2072339 is categorized as a potential denial of service (DoS) vulnerability affecting availability.

How do I fix REDHAT-BUG-2072339?

To mitigate REDHAT-BUG-2072339, it is recommended to apply the latest updates and patches provided by Red Hat for Undertow.

What software is affected by REDHAT-BUG-2072339?

REDHAT-BUG-2072339 affects Red Hat Undertow due to flow control handling issues over HTTP/2.

What are the potential impacts of REDHAT-BUG-2072339?

The potential impacts of REDHAT-BUG-2072339 include increased overhead on the server and potential denial of service scenarios.

Is there an existing fix for REDHAT-BUG-2072339?

There is an incomplete fix for REDHAT-BUG-2072339, which requires further updates or mitigations from Red Hat.