VYPR
← All advisories
Medium severity5.9NVD Advisory· Published May 24, 2022· Updated Jun 17, 2026

CVE-2021-3597

CVE-2021-3597

Description

A flaw was found in undertow. The HTTP2SourceChannel fails to write the final frame under some circumstances, resulting in a denial of service. The highest threat from this vulnerability is availability. This flaw affects Undertow versions prior to 2.0.35.SP1, prior to 2.2.6.SP1, prior to 2.2.7.SP1, prior to 2.0.36.SP1, prior to 2.2.9.Final and prior to 2.0.39.Final.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
io.undertow:undertow-coreMaven
>= 2.1.0, < 2.2.9.Final2.2.9.Final
io.undertow:undertow-coreMaven
< 2.0.39.Final2.0.39.Final

Affected products

20
  • undertow/undertowdescription
  • ghsa-coords
    pkg:maven/io.undertow/undertow-core
    Range: >= 2.1.0, < 2.2.9.Final
  • Red Hat/Fuse
    cpe:2.3:a:redhat:fuse:1.0:*:*:*:*:*:*:*
  • Red Hat/Jboss Enterprise Application Platform3 versions
    cpe:2.3:a:redhat:jboss_enterprise_application_platform:-:*:*:*:text-only:*:*:*+ 2 more
    • cpe:2.3:a:redhat:jboss_enterprise_application_platform:-:*:*:*:text-only:*:*:*
    • cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.3:*:*:*:*:*:*:*
    • cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.4:*:*:*:*:*:*:*
  • Red Hat/Openshift Application Runtimes
    cpe:2.3:a:redhat:openshift_application_runtimes:-:*:*:*:text-only:*:*:*
  • Red Hat/Single Sign On
    cpe:2.3:a:redhat:single_sign-on:-:*:*:*:text-only:*:*:*
  • Red Hat/Undertow7 versions
    cpe:2.3:a:redhat:undertow:*:*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:a:redhat:undertow:*:*:*:*:*:*:*:*range: <2.0.35
    • cpe:2.3:a:redhat:undertow:2.0.35:-:*:*:*:*:*:*
    • cpe:2.3:a:redhat:undertow:2.0.36:-:*:*:*:*:*:*
    • cpe:2.3:a:redhat:undertow:2.0.39:-:*:*:*:*:*:*
    • cpe:2.3:a:redhat:undertow:2.2.6:-:*:*:*:*:*:*
    • cpe:2.3:a:redhat:undertow:2.2.7:-:*:*:*:*:*:*
    • cpe:2.3:a:redhat:undertow:2.2.9:-:*:*:*:*:*:*
  • NetApp/Active Iq Unified Manager3 versions
    cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:linux:*:*+ 2 more
    • cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:linux:*:*
    • cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*
    • cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*
  • NetApp/Oncommand Insight
    cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*
  • NetApp/Oncommand Workflow Automation
    cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.