CVEs-PoC/2021/CVE-2021-3690.md

### [CVE-2021-3690](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3690)
![](https://img.shields.io/static/v1?label=Product&message=undertow&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=Fixed%20in%202.2.10.Final%2C%202.0.40.Final%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-400%20-%20Uncontrolled%20Resource%20Consumption&color=brightgreen)

### Description

A flaw was found in Undertow. A buffer leak on the incoming WebSocket PONG message may lead to memory exhaustion. This flaw allows an attacker to cause a denial of service. The highest threat from this vulnerability is availability.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/ARPSyndicate/cve-scores
- https://github.com/muneebaashiq/MBProjects