レッドハットの Red Hat Fuse 他複数ベンダの製品における競合状態に関する脆弱性
| Title |
レッドハットの Red Hat Fuse 他複数ベンダの製品における競合状態に関する脆弱性
|
| Summary |
レッドハットの Red Hat Fuse 他複数ベンダの製品には、競合状態に関する脆弱性が存在します。
|
| Possible impacts |
サービス運用妨害 (DoS) 状態にされる可能性があります。 |
| Solution |
参考情報を参照して適切な対策を実施してください。 |
| Publication Date |
June 11, 2021, midnight |
| Registration Date |
Aug. 15, 2023, 5:13 p.m. |
| Last Update |
Aug. 15, 2023, 5:13 p.m. |
|
CVSS3.0 : 警告
|
| Score |
5.9
|
| Vector |
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H |
|
CVSS2.0 : 注意
|
| Score |
2.6
|
| Vector |
AV:N/AC:H/Au:N/C:N/I:N/A:P |
Affected System
| レッドハット |
|
JBoss Enterprise Application Platform
|
|
JBoss Enterprise Application Platform 7.3
|
|
JBoss Enterprise Application Platform 7.4
|
|
Red Hat Fuse 1.0
|
|
Red Hat OpenShift Application Runtimes
|
|
Single Sign-On
|
|
Undertow 2.0.35
|
|
Undertow 2.0.35 未満
|
|
Undertow 2.0.36
|
|
Undertow 2.0.39
|
|
Undertow 2.2.0 以上 2.2.6 未満
|
|
Undertow 2.2.6
|
|
Undertow 2.2.7
|
|
Undertow 2.2.9
|
| NetApp |
|
Active IQ Unified Manager
|
|
OnCommand Insight
|
|
OnCommand Workflow Automation
|
CVE (情報セキュリティ 共通脆弱性識別子)
CWE (共通脆弱性タイプ一覧)
その他
Change Log
| No |
Changed Details |
Date of change |
| 1 |
[2023年08月15日]
掲載 |
Aug. 15, 2023, 5:13 p.m. |
NVD Vulnerability Information
CVE-2021-3597
| Summary |
A flaw was found in undertow. The HTTP2SourceChannel fails to write the final frame under some circumstances, resulting in a denial of service. The highest threat from this vulnerability is availability. This flaw affects Undertow versions prior to 2.0.35.SP1, prior to 2.2.6.SP1, prior to 2.2.7.SP1, prior to 2.0.36.SP1, prior to 2.2.9.Final and prior to 2.0.39.Final.
|
| Publication Date |
May 25, 2022, 4:15 a.m. |
| Registration Date |
May 25, 2022, 10 a.m. |
| Last Update |
Nov. 21, 2024, 3:21 p.m. |
Affected software configurations
| Configuration1 |
or higher |
or less |
more than |
less than |
| cpe:2.3:a:redhat:single_sign-on:-:*:*:*:text-only:*:*:* |
|
|
|
|
| cpe:2.3:a:redhat:jboss_enterprise_application_platform:-:*:*:*:text-only:*:*:* |
|
|
|
|
| cpe:2.3:a:redhat:openshift_application_runtimes:-:*:*:*:text-only:*:*:* |
|
|
|
|
| cpe:2.3:a:redhat:fuse:1.0:*:*:*:*:*:*:* |
|
|
|
|
| cpe:2.3:a:redhat:undertow:2.0.39:-:*:*:*:*:*:* |
|
|
|
|
| cpe:2.3:a:redhat:undertow:2.2.9:-:*:*:*:*:*:* |
|
|
|
|
| cpe:2.3:a:redhat:undertow:2.0.36:-:*:*:*:*:*:* |
|
|
|
|
| cpe:2.3:a:redhat:undertow:2.2.7:-:*:*:*:*:*:* |
|
|
|
|
| cpe:2.3:a:redhat:undertow:2.2.6:-:*:*:*:*:*:* |
|
|
|
|
| cpe:2.3:a:redhat:undertow:*:*:*:*:*:*:*:* |
2.2.0 |
|
|
2.2.6 |
| cpe:2.3:a:redhat:undertow:2.0.35:-:*:*:*:*:*:* |
|
|
|
|
| cpe:2.3:a:redhat:undertow:*:*:*:*:*:*:*:* |
|
|
|
2.0.35 |
| Configuration2 |
or higher |
or less |
more than |
less than |
| cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.3:*:*:*:*:*:*:* |
|
|
|
|
| cpe:2.3:a:redhat:jboss_enterprise_application_platform:7.4:*:*:*:*:*:*:* |
|
|
|
|
| execution environment |
| 1 |
cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:* |
| 2 |
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* |
| 3 |
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* |
| Configuration3 |
or higher |
or less |
more than |
less than |
| cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:* |
|
|
|
|
| cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:* |
|
|
|
|
| cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:* |
|
|
|
|
| cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:linux:*:* |
|
|
|
|
| cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:* |
|
|
|
|
Related information, measures and tools
Common Vulnerabilities List