CVE:CVE-2021-3597
CNNVD:CNNVD-202106-1197
Red Hat Undertow是美国红帽（Red Hat）公司的一款基于Java的嵌入式Web服务器，是Wildfly（Java应用服务器）默认的Web服务器。
Red Hat Undertow 存在安全漏洞，该漏洞源于 HTTP2SourceChannel 在某些情况下无法写入最终帧可能会导致 DoS。
solution:Upgrade redhat fuse to a higher version than 1.0,and avoid the version 1.0; Upgrade redhat jboss_enterprise_application_platform to a higher version than -,7.3,7.4,and avoid the version 7.3,7.4; Upgrade redhat openshift_application_runtimes to a higher version than -; Upgrade redhat single_sign-on to a higher version than -; Upgrade redhat undertow to a higher version than 2.0.35,2.2.6,2.0.35,2.0.36,2.0.39,2.2.6,2.2.7,2.2.9,and avoid the version (,2.0.35),[2.2.0,2.2.6),2.0.35,2.0.36,2.0.39,2.2.6,2.2.7,2.2.9; Upgrade netapp active_iq_unified_manager to a higher version than -; Upgrade netapp oncommand_insight to a higher version than -; Upgrade netapp oncommand_workflow_automation to a higher version than -