CVE:CVE-2021-3859
CNNVD:CNNVD-202202-039
Red Hat Undertow是美国红帽（Red Hat）公司的一款基于Java的嵌入式Web服务器，是Wildfly（Java应用服务器）默认的Web服务器。
Red Hat Undertow 中存在资源管理错误漏洞，该漏洞源于产品通过HTTP2进行的某些调用触发了客户端调用超时。该漏洞允许攻击者可利用该漏洞进行拒绝服务攻击。
solution:Upgrade redhat jboss_enterprise_application_platform to a higher version than 7.3,7.4,and avoid the version 7.3,7.4; Upgrade redhat single_sign-on to a higher version than 7.4.10,7.5.1,and avoid the version 7.4.10,7.5.1; Upgrade redhat undertow to a higher version than 2.2.15,and avoid the version (,2.2.15); Upgrade netapp cloud_secure_agent to a higher version than -; Upgrade netapp oncommand_insight to a higher version than -; Upgrade netapp oncommand_workflow_automation to a higher version than -