CVE-2021-3597CWE-362

A flaw was found in undertow

published May 24, 2022

CVSS
—
EPSS
1%
Percentile
66.9
In the wild
Unconfirmed
What it is

A flaw was found in undertow. The HTTP2SourceChannel fails to write the final frame under some circumstances, resulting in a denial of service. The highest threat from this vulnerability is availability. This flaw affects Undertow versions prior to 2.0.35.SP1, prior to 2.2.6.SP1, prior to 2.2.7.SP1, prior to 2.0.36.SP1, prior to 2.2.9.Final and prior to 2.0.39.Final.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01161 · 66.9th percentile
Weakness
CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Published
2022-05-24T18:19Z
EPSS history
Timeline
  • 24 MAY 18:19Z
    A flaw was found in undertow
    cvelistv5