Not rated
CVE-2022-1259 A flaw was found in Undertow
Description
A flaw was found in Undertow. A potential security issue in flow control handling by the browser over HTTP/2 may cause overhead or a denial of service in the server. This flaw exists because of an incomplete fix for CVE-2021-3629.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Undertow | Versions not published |
References
- bugzilla.redhat.com bugzilla.redhat.com
- access.redhat.com access.redhat.com
- security.netapp.com security.netapp.com
Timeline
- Published
- Last modified
Other CVEs of Undertow
The 14 CVEs of Undertow →
CVE-2022-4492
The undertow client is not checking the server identity presented by the server certificate in https connections
Not rated
CVE-2022-2764
A flaw was found in Undertow
Not rated
CVE-2022-1319
A flaw was found in Undertow
Not rated
CVE-2021-3859
A flaw was found in Undertow that tripped the client-side invocation timeout with certain calls made over HTTP2
Not rated