CVE-2021-3690CWE-400

A flaw was found in Undertow

published August 23, 2022

CVSS
—
EPSS
2%
Percentile
78.0
In the wild
Unconfirmed
What it is

A flaw was found in Undertow. A buffer leak on the incoming WebSocket PONG message may lead to memory exhaustion. This flaw allows an attacker to cause a denial of service. The highest threat from this vulnerability is availability.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01774 · 78.0th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2022-08-23T15:50Z
EPSS history
Timeline
  • 23 AUG 15:50Z
    A flaw was found in Undertow
    cvelistv5