Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-w68h-fc49-cmrg

Опубликовано: 23 сент. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

Buffer over-read vulnerability in Apache Tomcat Native during the TLS handshake permits a malicious user to trigger a DoS via a JVM crash.

This issue affects Apache Tomcat Native: from 2.0.0 through 2.0.15, from 1.3.0 through 1.3.8. Earlier, unsupported versions may also be affected.

Users are recommended to upgrade to version 1.3.9 or 2.0.16, which fix the issue.

Buffer over-read vulnerability in Apache Tomcat Native during the TLS handshake permits a malicious user to trigger a DoS via a JVM crash.

This issue affects Apache Tomcat Native: from 2.0.0 through 2.0.15, from 1.3.0 through 1.3.8. Earlier, unsupported versions may also be affected.

Users are recommended to upgrade to version 1.3.9 or 2.0.16, which fix the issue.

EPSS

Процентиль: 47%
0.00564
Низкий

7.5 High

CVSS3

Дефекты

CWE-126

Связанные уязвимости

CVSS3: 7.5
ubuntu
около 2 месяцев назад

Buffer over-read vulnerability in Apache Tomcat Native during the TLS handshake permits a malicious user to trigger a DoS via a JVM crash. This issue affects Apache Tomcat Native: from 2.0.0 through 2.0.15, from 1.3.0 through 1.3.8. Earlier, unsupported versions may also be affected. Users are recommended to upgrade to version 1.3.9 or 2.0.16, which fix the issue.

CVSS3: 7.5
redhat
около 2 месяцев назад

Buffer over-read vulnerability in Apache Tomcat Native during the TLS handshake permits a malicious user to trigger a DoS via a JVM crash. This issue affects Apache Tomcat Native: from 2.0.0 through 2.0.15, from 1.3.0 through 1.3.8. Earlier, unsupported versions may also be affected. Users are recommended to upgrade to version 1.3.9 or 2.0.16, which fix the issue.

CVSS3: 7.5
nvd
около 2 месяцев назад

Buffer over-read vulnerability in Apache Tomcat Native during the TLS handshake permits a malicious user to trigger a DoS via a JVM crash. This issue affects Apache Tomcat Native: from 2.0.0 through 2.0.15, from 1.3.0 through 1.3.8. Earlier, unsupported versions may also be affected. Users are recommended to upgrade to version 1.3.9 or 2.0.16, which fix the issue.

CVSS3: 7.5
debian
около 2 месяцев назад

Buffer over-read vulnerability in Apache Tomcat Native during the TLS ...

CVSS3: 7.5
redos
16 дней назад

Уязвимость tomcat-native

EPSS

Процентиль: 47%
0.00564
Низкий

7.5 High

CVSS3

Дефекты

CWE-126