CVE-2022-1259
Fixed in a distro release EPSS 1%
A flaw was found in Undertow. A potential security issue in flow control handling by the browser over HTTP/2 may cause overhead or a denial of service in the server. This flaw exists because of an incomplete fix for CVE-2021-3629.
Products: redhat build_of_quarkus, redhat integration_camel_k, redhat jboss_enterprise_application_platform, redhat openshift_application_runtimes, redhat single_sign-on, redhat undertow, netapp active_iq_unified_manager, netapp cloud_secure_agent, netapp oncommand_insight, netapp oncommand_workflow_automation
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Red Hat jboss enterprise application platform 7.4 | eap7-snakeyaml | 0:1.31.0-1.redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-snakeyaml | 0:1.31.0-1.redhat_00001.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-snakeyaml | 0:1.31.0-1.redhat_00001.1.el9eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-undertow | 0:2.2.19-1.SP2_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-undertow | 0:2.2.19-1.SP2_redhat_00001.1.el8eap |
| Red Hat jboss enterprise application platform 7.4 | eap7-undertow | 0:2.2.19-1.SP2_redhat_00001.1.el9eap |
| Red Hat jboss enterprise application platform eus 7.1 | eap7-glassfish-el | 0:3.0.1-4.b08_redhat_00005.1.ep7.el7 |
| Red Hat jboss enterprise application platform eus 7.1 | eap7-glassfish-el-impl | 0:3.0.1-4.b08_redhat_00005.1.ep7.el7 |
| Red Hat jboss enterprise application platform eus 7.1 | eap7-hibernate | 0:5.1.17-3.Final_redhat_00004.1.ep7.el7 |
| Red Hat jboss enterprise application platform eus 7.1 | eap7-hibernate-core | 0:5.1.17-3.Final_redhat_00004.1.ep7.el7 |
| Red Hat jboss enterprise application platform eus 7.1 | eap7-hibernate-entitymanager | 0:5.1.17-3.Final_redhat_00004.1.ep7.el7 |
| Red Hat jboss enterprise application platform eus 7.1 | eap7-hibernate-envers | 0:5.1.17-3.Final_redhat_00004.1.ep7.el7 |
| Red Hat jboss enterprise application platform eus 7.1 | eap7-hibernate-infinispan | 0:5.1.17-3.Final_redhat_00004.1.ep7.el7 |
| Red Hat jboss enterprise application platform eus 7.1 | eap7-hibernate-java8 | 0:5.1.17-3.Final_redhat_00004.1.ep7.el7 |
| Red Hat jboss enterprise application platform eus 7.1 | eap7-jackson-databind | 0:2.8.11.6-3.SP1_redhat_00003.1.ep7.el7 |
| Red Hat jboss enterprise application platform eus 7.1 | eap7-jboss-ejb-client | 0:4.0.12-1.Final_redhat_00002.1.ep7.el7 |
| Red Hat jboss enterprise application platform eus 7.1 | eap7-netty | 0:4.1.63-2.Final_redhat_00003.1.ep7.el7 |
| Red Hat jboss enterprise application platform eus 7.1 | eap7-netty-all | 0:4.1.63-2.Final_redhat_00003.1.ep7.el7 |
| Red Hat jboss enterprise application platform eus 7.1 | eap7-undertow | 0:1.4.18-16.SP14_redhat_00001.1.ep7.el7 |
| Red Hat jboss enterprise application platform eus 7.1 | eap7-wildfly | 0:7.1.11-4.GA_redhat_00002.1.ep7.el7 |
| Red Hat jboss enterprise application platform eus 7.1 | eap7-wildfly-elytron | 0:1.1.14-1.Final_redhat_00001.1.ep7.el7 |
| Red Hat jboss enterprise application platform eus 7.1 | eap7-wildfly-http-client | 0:1.0.21-1.Final_redhat_00001.1.ep7.el7 |
| Red Hat jboss enterprise application platform eus 7.1 | eap7-wildfly-http-client-common | 0:1.0.21-1.Final_redhat_00001.1.ep7.el7 |
| Red Hat jboss enterprise application platform eus 7.1 | eap7-wildfly-http-ejb-client | 0:1.0.21-1.Final_redhat_00001.1.ep7.el7 |
| Red Hat jboss enterprise application platform eus 7.1 | eap7-wildfly-http-naming-client | 0:1.0.21-1.Final_redhat_00001.1.ep7.el7 |
| Red Hat jboss enterprise application platform eus 7.1 | eap7-wildfly-http-transaction-client | 0:1.0.21-1.Final_redhat_00001.1.ep7.el7 |
| Red Hat jboss enterprise application platform eus 7.1 | eap7-wildfly-modules | 0:7.1.11-4.GA_redhat_00002.1.ep7.el7 |
| Red Hat jboss enterprise application platform eus 7.1 | eap7-wildfly-naming-client | 0:1.0.13-1.Final_redhat_00001.1.ep7.el7 |
| Red Hat jboss enterprise application platform eus 7.1 | eap7-wildfly-openssl | 0:1.0.12-1.Final_redhat_00001.1.ep7.el7 |
| Red Hat jboss enterprise application platform eus 7.1 | eap7-wildfly-openssl-java | 0:1.0.12-1.Final_redhat_00001.1.ep7.el7 |
| Red Hat jboss enterprise application platform eus 7.1 | eap7-wildfly-openssl-linux | 0:1.0.12-6.Final_redhat_00001.1.ep7.el7 |
| Red Hat jboss enterprise application platform eus 7.1 | eap7-wildfly-openssl-linux-debuginfo | 0:1.0.12-6.Final_redhat_00001.1.ep7.el7 |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-jackson-annotations | 0:2.10.4-3.redhat_00006.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-jackson-core | 0:2.10.4-3.redhat_00006.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-jackson-databind | 0:2.10.4-5.redhat_00006.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-jackson-datatype-jdk8 | 0:2.10.4-2.redhat_00006.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-jackson-datatype-jsr310 | 0:2.10.4-2.redhat_00006.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-jackson-jaxrs-base | 0:2.10.4-3.redhat_00006.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-jackson-jaxrs-json-provider | 0:2.10.4-3.redhat_00006.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-jackson-jaxrs-providers | 0:2.10.4-3.redhat_00006.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-jackson-module-jaxb-annotations | 0:2.10.4-5.redhat_00006.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-jackson-modules-base | 0:2.10.4-5.redhat_00006.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-jackson-modules-java8 | 0:2.10.4-2.redhat_00006.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-jboss-server-migration | 0:1.7.2-16.Final_redhat_00017.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-jboss-server-migration-cli | 0:1.7.2-16.Final_redhat_00017.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-jboss-server-migration-core | 0:1.7.2-16.Final_redhat_00017.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-jboss-server-migration-eap6.4 | 0:1.7.2-16.Final_redhat_00017.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-jboss-server-migration-eap6.4-to-eap7.3 | 0:1.7.2-16.Final_redhat_00017.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-jboss-server-migration-eap7.0 | 0:1.7.2-16.Final_redhat_00017.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-jboss-server-migration-eap7.1 | 0:1.7.2-16.Final_redhat_00017.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-jboss-server-migration-eap7.2 | 0:1.7.2-16.Final_redhat_00017.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-jboss-server-migration-eap7.2-to-eap7.3 | 0:1.7.2-16.Final_redhat_00017.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-jboss-server-migration-eap7.3-server | 0:1.7.2-16.Final_redhat_00017.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-jboss-server-migration-wildfly10.0 | 0:1.7.2-16.Final_redhat_00017.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-jboss-server-migration-wildfly10.1 | 0:1.7.2-16.Final_redhat_00017.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-jboss-server-migration-wildfly11.0 | 0:1.7.2-16.Final_redhat_00017.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-jboss-server-migration-wildfly12.0 | 0:1.7.2-16.Final_redhat_00017.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-jboss-server-migration-wildfly13.0-server | 0:1.7.2-16.Final_redhat_00017.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-jboss-server-migration-wildfly14.0-server | 0:1.7.2-16.Final_redhat_00017.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-jboss-server-migration-wildfly15.0-server | 0:1.7.2-16.Final_redhat_00017.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-jboss-server-migration-wildfly16.0-server | 0:1.7.2-16.Final_redhat_00017.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-jboss-server-migration-wildfly17.0-server | 0:1.7.2-16.Final_redhat_00017.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-jboss-server-migration-wildfly18.0-server | 0:1.7.2-16.Final_redhat_00017.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-jboss-server-migration-wildfly8.2 | 0:1.7.2-16.Final_redhat_00017.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-jboss-server-migration-wildfly9.0 | 0:1.7.2-16.Final_redhat_00017.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-netty | 0:4.1.63-5.Final_redhat_00003.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-netty-all | 0:4.1.63-5.Final_redhat_00003.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-undertow | 0:2.0.41-4.SP5_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-wildfly | 0:7.3.14-3.GA_redhat_00002.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-wildfly-elytron | 0:1.10.17-1.Final_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-wildfly-elytron-tool | 0:1.10.17-1.Final_redhat_00001.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-wildfly-java-jdk11 | 0:7.3.14-3.GA_redhat_00002.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-wildfly-java-jdk8 | 0:7.3.14-3.GA_redhat_00002.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-wildfly-javadocs | 0:7.3.14-3.GA_redhat_00002.1.el7eap |
| Red Hat jboss enterprise application platform eus 7.3 | eap7-wildfly-modules | 0:7.3.14-3.GA_redhat_00002.1.el7eap |
| Ubuntu 25.10 | undertow | no fix |
| Ubuntu 26.04 LTS | undertow | no fix |
| Ubuntu 26.10 | undertow | no fix |
| Ubuntu Pro 16.04 LTS | undertow | no fix |
| Ubuntu Pro 18.04 LTS | undertow | no fix |
| Ubuntu Pro 20.04 LTS | undertow | no fix |
| Ubuntu Pro 22.04 LTS | undertow | no fix |
| Ubuntu Pro 24.04 LTS | undertow | no fix |