DeutschShown in its original language — a full translation is planned for a future version.
Apache Tomcat: Mehrere Schwachstellen ermöglichen Denial of Service
view advisory published 2020-07-14
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apache Tomcat ausnutzen, um einen Denial of Service Angriff durchzuführen.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-13935US | high7.5 | Exploit | ||
The payload length in a WebSocket frame was not correctly validated in Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M1 to 9.0.36, 8.5.0 to 8.5.56 and 7.0.27 to 7.0.104. Invalid payl… | ||||
| CVE-2020-13934US | high7.5 | — | ||
An h2c direct connection to Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M5 to 9.0.36 and 8.5.1 to 8.5.56 did not release the HTTP/1.1 processor after the upgrade to HTTP/2. If a su… | ||||
02
references
External citations — patches, advisories, analysis.
- SUSE Security Update SUSE-SU-2020:2045-1 vom 2020-07-24external
- SUSE Security Update SUSE-SU-2020:2037-1 vom 2020-07-24external
- SUSE Security Update SUSE-SU-2020:2047-1 vom 2020-07-24external
- SUSE Security Update SUSE-SU-2020:2046-1 vom 2020-07-24external
- SUSE Security Update SUSE-SU-2020:2611-1 vom 2020-09-11external
- OSS Mailing-list vom 2020-07-14external
- Release Tomcat 10.0.0-M7external
- Release Tomcat 8.5.57external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan