CVE-2021-3859
Fixed in a distro release EPSS 2%
A flaw was found in Undertow that tripped the client-side invocation timeout with certain calls made over HTTP2. This flaw allows an attacker to carry out denial of service attacks.
Products: redhat jboss_enterprise_application_platform, redhat single_sign-on, redhat undertow, netapp cloud_secure_agent, netapp oncommand_insight, netapp oncommand_workflow_automation
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Maven | io.undertow:undertow-core | 2.2.15 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 14 | undertow | 2.2.16-1 |
| Red Hat jboss enterprise application platform 7.3 | eap7-undertow | 0:2.0.41-2.SP2_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.3 | eap7-undertow | 0:2.0.41-2.SP2_redhat_00001.1.el8eap |
| Red Hat jboss enterprise application platform 7.3 | eap7-undertow | 0:2.0.41-2.SP2_redhat_00001.1.el6eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-hornetq | 0:2.4.8-1.Final_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-hornetq | 0:2.4.8-1.Final_redhat_00001.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-hornetq-commons | 0:2.4.8-1.Final_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-hornetq-commons | 0:2.4.8-1.Final_redhat_00001.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-hornetq-core-client | 0:2.4.8-1.Final_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-hornetq-core-client | 0:2.4.8-1.Final_redhat_00001.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-hornetq-jms-client | 0:2.4.8-1.Final_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-hornetq-jms-client | 0:2.4.8-1.Final_redhat_00001.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-undertow | 0:2.2.13-1.SP2_redhat_00001.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-undertow | 0:2.2.13-1.SP2_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.1 | eap7-activemq-artemis | 0:1.5.5.016-1.redhat_00001.1.ep7.el7 |
| Red Hat jboss enterprise application platform eus 7.1 | eap7-activemq-artemis-cli | 0:1.5.5.016-1.redhat_00001.1.ep7.el7 |
| Red Hat jboss enterprise application platform eus 7.1 | eap7-activemq-artemis-commons | 0:1.5.5.016-1.redhat_00001.1.ep7.el7 |
| Red Hat jboss enterprise application platform eus 7.1 | eap7-activemq-artemis-core-client | 0:1.5.5.016-1.redhat_00001.1.ep7.el7 |
| Red Hat jboss enterprise application platform eus 7.1 | eap7-activemq-artemis-dto | 0:1.5.5.016-1.redhat_00001.1.ep7.el7 |
| Red Hat jboss enterprise application platform eus 7.1 | eap7-activemq-artemis-hornetq-protocol | 0:1.5.5.016-1.redhat_00001.1.ep7.el7 |
| Red Hat jboss enterprise application platform eus 7.1 | eap7-activemq-artemis-hqclient-protocol | 0:1.5.5.016-1.redhat_00001.1.ep7.el7 |
| Red Hat jboss enterprise application platform eus 7.1 | eap7-activemq-artemis-jdbc-store | 0:1.5.5.016-1.redhat_00001.1.ep7.el7 |
| Red Hat jboss enterprise application platform eus 7.1 | eap7-activemq-artemis-jms-client | 0:1.5.5.016-1.redhat_00001.1.ep7.el7 |
| Red Hat jboss enterprise application platform eus 7.1 | eap7-activemq-artemis-jms-server | 0:1.5.5.016-1.redhat_00001.1.ep7.el7 |
| Red Hat jboss enterprise application platform eus 7.1 | eap7-activemq-artemis-journal | 0:1.5.5.016-1.redhat_00001.1.ep7.el7 |
| Red Hat jboss enterprise application platform eus 7.1 | eap7-activemq-artemis-native | 0:1.5.5.016-1.redhat_00001.1.ep7.el7 |
| Red Hat jboss enterprise application platform eus 7.1 | eap7-activemq-artemis-ra | 0:1.5.5.016-1.redhat_00001.1.ep7.el7 |
| Red Hat jboss enterprise application platform eus 7.1 | eap7-activemq-artemis-selector | 0:1.5.5.016-1.redhat_00001.1.ep7.el7 |
| Red Hat jboss enterprise application platform eus 7.1 | eap7-activemq-artemis-server | 0:1.5.5.016-1.redhat_00001.1.ep7.el7 |
| Red Hat jboss enterprise application platform eus 7.1 | eap7-activemq-artemis-service-extensions | 0:1.5.5.016-1.redhat_00001.1.ep7.el7 |
| Red Hat jboss enterprise application platform eus 7.1 | eap7-artemis-native | 1:1.5.5.016-1.redhat_00001.1.ep7.el7 |
| Red Hat jboss enterprise application platform eus 7.1 | eap7-artemis-native-debuginfo | 1:1.5.5.016-1.redhat_00001.1.ep7.el7 |
| Red Hat jboss enterprise application platform eus 7.1 | eap7-artemis-native-wildfly | 1:1.5.5.016-1.redhat_00001.1.ep7.el7 |
| Red Hat jboss enterprise application platform eus 7.1 | eap7-jboss-xnio-base | 0:3.5.11-1.Final_redhat_00001.1.ep7.el7 |
| Red Hat jboss enterprise application platform eus 7.1 | eap7-jsoup | 0:1.14.2-1.redhat_00002.1.ep7.el7 |
| Red Hat jboss enterprise application platform eus 7.1 | eap7-undertow | 0:1.4.18-14.SP13_redhat_00001.1.ep7.el7 |
| Red Hat jboss enterprise application platform eus 7.1 | eap7-wildfly | 0:7.1.10-2.GA_redhat_00002.1.ep7.el7 |
| Red Hat jboss enterprise application platform eus 7.1 | eap7-wildfly-modules | 0:7.1.10-2.GA_redhat_00002.1.ep7.el7 |
| Red Hat jboss enterprise application platform eus 7.1 | eap7-woodstox-core | 0:5.0.3-2.redhat_00002.1.ep7.el7 |
| Red Hat jboss enterprise application platform eus 7.1 | eap7-xml-security | 0:2.0.10-2.redhat_00002.1.ep7.el7 |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-apache-cxf | 0:3.4.10-1.SP1_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-apache-cxf-rt | 0:3.4.10-1.SP1_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-apache-cxf-services | 0:3.4.10-1.SP1_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-apache-cxf-tools | 0:3.4.10-1.SP1_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-avro | 0:1.7.6-8.redhat_00003.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-h2database | 0:1.4.197-3.redhat_00004.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-jboss-annotations-api_1.3_spec | 0:2.0.1-4.Final_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-jboss-marshalling | 0:2.0.15-1.Final_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-jboss-marshalling-river | 0:2.0.15-1.Final_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-jboss-server-migration | 0:1.7.2-12.Final_redhat_00013.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-jboss-server-migration-cli | 0:1.7.2-12.Final_redhat_00013.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-jboss-server-migration-core | 0:1.7.2-12.Final_redhat_00013.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-jboss-server-migration-eap6.4 | 0:1.7.2-12.Final_redhat_00013.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-jboss-server-migration-eap6.4-to-eap7.3 | 0:1.7.2-12.Final_redhat_00013.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-jboss-server-migration-eap7.0 | 0:1.7.2-12.Final_redhat_00013.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-jboss-server-migration-eap7.1 | 0:1.7.2-12.Final_redhat_00013.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-jboss-server-migration-eap7.2 | 0:1.7.2-12.Final_redhat_00013.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-jboss-server-migration-eap7.2-to-eap7.3 | 0:1.7.2-12.Final_redhat_00013.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-jboss-server-migration-eap7.3-server | 0:1.7.2-12.Final_redhat_00013.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-jboss-server-migration-wildfly10.0 | 0:1.7.2-12.Final_redhat_00013.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-jboss-server-migration-wildfly10.1 | 0:1.7.2-12.Final_redhat_00013.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-jboss-server-migration-wildfly11.0 | 0:1.7.2-12.Final_redhat_00013.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-jboss-server-migration-wildfly12.0 | 0:1.7.2-12.Final_redhat_00013.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-jboss-server-migration-wildfly13.0-server | 0:1.7.2-12.Final_redhat_00013.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-jboss-server-migration-wildfly14.0-server | 0:1.7.2-12.Final_redhat_00013.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-jboss-server-migration-wildfly15.0-server | 0:1.7.2-12.Final_redhat_00013.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-jboss-server-migration-wildfly16.0-server | 0:1.7.2-12.Final_redhat_00013.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-jboss-server-migration-wildfly17.0-server | 0:1.7.2-12.Final_redhat_00013.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-jboss-server-migration-wildfly18.0-server | 0:1.7.2-12.Final_redhat_00013.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-jboss-server-migration-wildfly8.2 | 0:1.7.2-12.Final_redhat_00013.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-jboss-server-migration-wildfly9.0 | 0:1.7.2-12.Final_redhat_00013.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-jboss-xnio-base | 0:3.7.13-1.Final_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-log4j-jboss-logmanager | 0:1.2.2-2.Final_redhat_00002.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-wildfly | 0:7.3.11-4.GA_redhat_00002.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-wildfly-java-jdk11 | 0:7.3.11-4.GA_redhat_00002.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-wildfly-java-jdk8 | 0:7.3.11-4.GA_redhat_00002.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-wildfly-javadocs | 0:7.3.11-4.GA_redhat_00002.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-wildfly-modules | 0:7.3.11-4.GA_redhat_00002.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-wss4j | 0:2.3.3-2.redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-wss4j-bindings | 0:2.3.3-2.redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-wss4j-policy | 0:2.3.3-2.redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-wss4j-ws-security-common | 0:2.3.3-2.redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-wss4j-ws-security-dom | 0:2.3.3-2.redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-wss4j-ws-security-policy-stax | 0:2.3.3-2.redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-wss4j-ws-security-stax | 0:2.3.3-2.redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-xalan-j2 | 0:2.7.1-38.redhat_00015.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-xml-security | 0:2.2.3-2.redhat_00001.1.el7eap |
| Red Hat red hat single sign on 7.5 | rh-sso7-keycloak | 0:15.0.4-1.redhat_00003.1.el8sso |
| Red Hat red hat single sign on 7.5 | rh-sso7-keycloak | 0:15.0.4-1.redhat_00003.1.el7sso |
| Red Hat red hat single sign on 7.5 | rh-sso7-keycloak-server | 0:15.0.4-1.redhat_00003.1.el8sso |
| Red Hat red hat single sign on 7.5 | rh-sso7-keycloak-server | 0:15.0.4-1.redhat_00003.1.el7sso |
| Ubuntu 25.10 | undertow | no fix |
| Ubuntu 26.04 LTS | undertow | no fix |
| Ubuntu 26.10 | undertow | no fix |
| Ubuntu Pro 16.04 LTS | undertow | no fix |
| Ubuntu Pro 18.04 LTS | undertow | no fix |
| Ubuntu Pro 20.04 LTS | undertow | no fix |
| Ubuntu Pro 22.04 LTS | undertow | no fix |
| Ubuntu Pro 24.04 LTS | undertow | no fix |