Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2021-3690HistoryAug 23, 2022 - 4:15 p.m.
CVE-2021-3690
2022-08-2316:15:09
Debian Security Bug Tracker
security-tracker.debian.org
50
undertow
websocket
pong
denial of service
memory exhaustion
vulnerability
availability
flaw
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
47.2%
A flaw was found in Undertow. A buffer leak on the incoming WebSocket PONG message may lead to memory exhaustion. This flaw allows an attacker to cause a denial of service. The highest threat from this vulnerability is availability.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 999 | all | undertow | < 2.2.10-1 | undertow_2.2.10-1_all.deb |
Related
cvelist
cvelist
CVE-2021-3690
2022-08-23 15:50:35
nessus
nessus
osv
osv
Undertow vulnerable to memory exhaustion due to buffer leak
2022-07-15 21:07:20
CVE-2021-3690
2022-08-23 16:15:09
cve
cve
CVE-2021-3690
2022-08-23 16:15:09
ubuntucve
ubuntucve
CVE-2021-3690
2022-08-23 00:00:00
prion
prion
Design/Logic Flaw
2022-08-23 16:15:00
redhat
redhat
github
github
Undertow vulnerable to memory exhaustion due to buffer leak
2022-07-15 21:07:20
redhatcve
redhatcve
CVE-2021-3690
2021-08-09 01:56:47
nvd
nvd
CVE-2021-3690
2022-08-23 16:15:09
oracle
oracle
Oracle Critical Patch Update Advisory - April 2022
2022-04-19 00:00:00
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
47.2%
Related for DEBIANCVE:CVE-2021-3690