Description

A flaw was found in Undertow. A buffer leak on the incoming WebSocket PONG message may lead to memory exhaustion. This flaw allows an attacker to cause a denial of service. The highest threat from this vulnerability is availability.

Remediation

References

CVE-2021-3690

Related Vulnerabilities

WordPress Plugin WP jPlayer Cross-Site Scripting (0.1)

MySQL CVE-2013-0371 Vulnerability (CVE-2013-0371)

Jenkins Insufficient Session Expiration Vulnerability (CVE-2019-1003003)

WordPress Plugin WordPress for Google Maps-WP MAPS Cross-Site Request Forgery (4.0.9)

Oracle HTTP Server CVE-2020-2530 Vulnerability (CVE-2020-2530)

Severity

High

Classification

CVE-2021-3690 CWE-400 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L

Tags

Missing Update Known Vulnerabilities