| Package | Affected versions | Patched versions |
|---|---|---|
| io.undertow:undertow-core | ≥ 2.1.0, < 2.2.11.Final< 2.0.40.Final | 2.2.11.Final2.0.40.Final |
| jboss enterprise application platform | = 7.3= 7.4 | |
| undertow | ≥ 2.2.0, < 2.2.11< 2.0.40 | 2.2.112.0.40 |
| wildfly core | < 17.0 | 17.0 |
A flaw was found in Undertow. A potential security issue in flow control handling by the browser over HTTP/2 may potentially cause overhead or a denial of service in the server. The highest threat from this vulnerability is availability. This flaw affects Undertow versions prior to 2.0.40.Final and prior to 2.2.11.Final.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free