CVE:CVE-2021-3690
CNNVD:CNNVD-202108-1669
Red Hat JBoss Enterprise Application Platform（EAP）是美国红帽（Red Hat）公司的一套开源的、基于J2EE的中间件平台。该平台主要用于构建、部署和托管Java应用程序与服务。
Red Hat JBoss Enterprise Application Platform 存在安全漏洞，该漏洞源于Red Hat JBoss Enterprise Application Platform 7.3 传入 websocket PONG 消息的缓冲区泄漏可能导致 DoS。
solution:Upgrade redhat fuse to a higher version than 1.0,and avoid the version 1.0; Upgrade redhat integration_camel_k to a higher version than -; Upgrade redhat integration_camel_quarkus to a higher version than -; Upgrade redhat jboss_enterprise_application_platform to a higher version than -,7.3,7.4,and avoid the version 7.3,7.4; Upgrade redhat openshift_application_runtimes to a higher version than -; Upgrade redhat single_sign-on to a higher version than -; Upgrade redhat undertow to a higher version than 2.0.40,2.2.10,and avoid the version (,2.0.40),[2.1.0,2.2.10)