http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-202104-117

Apache CXF是美国阿帕奇（Apache）基金会的一个开源的Web服务框架。该框架支持多种Web服务标准、多种前端编程API等。 Apache CXF 存在代码问题漏洞，攻击者可利用该漏洞DDos攻击，以下产品及版本受到影响：Apache CXF versions prior to 3.4.3; Apache CXF versions prior to 3.3.10。

来源:MLIST

链接:https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4@%3Ccommits.cxf.apache.org%3E

来源:MLIST

链接:https://lists.apache.org/thread.html/r8651c06212c56294a1c0ea61a5ad7790c06502209c03f05c0c7c9914@%3Cusers.cxf.apache.org%3E

来源:MLIST

链接:https://lists.apache.org/thread.html/r8651c06212c56294a1c0ea61a5ad7790c06502209c03f05c0c7c9914@%3Cdev.cxf.apache.org%3E

来源:MLIST

链接:http://www.openwall.com/lists/oss-security/2021/04/02/2

来源:CONFIRM

链接:https://cxf.apache.org/security-advisories.data/CVE-2021-22696.txt.asc

来源:MLIST

链接:https://lists.apache.org/thread.html/r6445001cc5f9a2bb1e6316993753306e054bdd1d702656b7cbe59045@%3Cannounce.apache.org%3E

来源:nvd.nist.gov

链接:https://nvd.nist.gov/vuln/detail/CVE-2021-22696

来源:access.redhat.com

链接:https://access.redhat.com/security/cve/cve-2021-22696