A flaw was found in undertow. The HTTP2SourceChannel fails to write the final frame under some circumstances, resulting in a denial of service. The highest threat from this vulnerability is availability. This flaw affects Undertow versions before 2.0.35.SP1, before 2.2.6.SP1, before 2.2.7.SP1, before 2.0.36.SP1, before 2.2.9.Final and before 2.0.39.Final.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
redhat single sign-on - |
||
redhat jboss enterprise application platform - |
||
redhat openshift application runtimes - |
||
redhat fuse 1.0 |
||
redhat undertow 2.0.39 |
||
redhat undertow 2.2.9 |
||
redhat undertow 2.0.36 |
||
redhat undertow 2.2.7 |
||
redhat undertow 2.2.6 |
||
redhat undertow |
||
redhat undertow 2.0.35 |
||
redhat jboss_enterprise_application_platform 7.3 |
||
redhat jboss_enterprise_application_platform 7.4 |
||
netapp oncommand workflow automation - |
||
netapp oncommand insight - |
||
netapp active iq unified manager - |
Vulmon