Количество 13
Количество 13
CVE-2019-0199
The HTTP/2 implementation in Apache Tomcat 9.0.0.M1 to 9.0.14 and 8.5.0 to 8.5.37 accepted streams with excessive numbers of SETTINGS frames and also permitted clients to keep streams open without reading/writing request/response data. By keeping streams open for requests that utilised the Servlet API's blocking I/O, clients were able to cause server-side threads to block eventually leading to thread exhaustion and a DoS.
CVE-2019-0199
The HTTP/2 implementation in Apache Tomcat 9.0.0.M1 to 9.0.14 and 8.5.0 to 8.5.37 accepted streams with excessive numbers of SETTINGS frames and also permitted clients to keep streams open without reading/writing request/response data. By keeping streams open for requests that utilised the Servlet API's blocking I/O, clients were able to cause server-side threads to block eventually leading to thread exhaustion and a DoS.
CVE-2019-0199
The HTTP/2 implementation in Apache Tomcat 9.0.0.M1 to 9.0.14 and 8.5.0 to 8.5.37 accepted streams with excessive numbers of SETTINGS frames and also permitted clients to keep streams open without reading/writing request/response data. By keeping streams open for requests that utilised the Servlet API's blocking I/O, clients were able to cause server-side threads to block eventually leading to thread exhaustion and a DoS.
CVE-2019-0199
The HTTP/2 implementation in Apache Tomcat 9.0.0.M1 to 9.0.14 and 8.5. ...
openSUSE-SU-2019:1723-1
Security update for tomcat
SUSE-SU-2019:1825-1
Security update for tomcat
GHSA-qcxh-w3j9-58qr
Apache Tomcat Denial of Service vulnerability
BDU:2020-01022
Уязвимость реализации сетевого протокола HTTP/2 веб-сервера Apache HTTP Server, позволяющая нарушителю вызвать отказ в обслуживании
openSUSE-SU-2019:1808-1
Security update for tomcat
openSUSE-SU-2019:1673-1
Security update for tomcat
SUSE-SU-2019:1895-1
Security update for tomcat
SUSE-SU-2019:1693-1
Security update for tomcat
SUSE-SU-2019:1866-1
Security update for tomcat
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2019-0199 The HTTP/2 implementation in Apache Tomcat 9.0.0.M1 to 9.0.14 and 8.5.0 to 8.5.37 accepted streams with excessive numbers of SETTINGS frames and also permitted clients to keep streams open without reading/writing request/response data. By keeping streams open for requests that utilised the Servlet API's blocking I/O, clients were able to cause server-side threads to block eventually leading to thread exhaustion and a DoS. | CVSS3: 7.5 | 64% Средний | около 6 лет назад |
 | CVE-2019-0199 The HTTP/2 implementation in Apache Tomcat 9.0.0.M1 to 9.0.14 and 8.5.0 to 8.5.37 accepted streams with excessive numbers of SETTINGS frames and also permitted clients to keep streams open without reading/writing request/response data. By keeping streams open for requests that utilised the Servlet API's blocking I/O, clients were able to cause server-side threads to block eventually leading to thread exhaustion and a DoS. | CVSS3: 7.5 | 64% Средний | около 6 лет назад |
 | CVE-2019-0199 The HTTP/2 implementation in Apache Tomcat 9.0.0.M1 to 9.0.14 and 8.5.0 to 8.5.37 accepted streams with excessive numbers of SETTINGS frames and also permitted clients to keep streams open without reading/writing request/response data. By keeping streams open for requests that utilised the Servlet API's blocking I/O, clients were able to cause server-side threads to block eventually leading to thread exhaustion and a DoS. | CVSS3: 7.5 | 64% Средний | около 6 лет назад |
| CVE-2019-0199 The HTTP/2 implementation in Apache Tomcat 9.0.0.M1 to 9.0.14 and 8.5. ... | CVSS3: 7.5 | 64% Средний | около 6 лет назад |
 | openSUSE-SU-2019:1723-1 Security update for tomcat | 64% Средний | почти 6 лет назад | |
| SUSE-SU-2019:1825-1 Security update for tomcat | 64% Средний | почти 6 лет назад | |
| GHSA-qcxh-w3j9-58qr Apache Tomcat Denial of Service vulnerability | CVSS3: 7.5 | 64% Средний | около 5 лет назад |
 | BDU:2020-01022 Уязвимость реализации сетевого протокола HTTP/2 веб-сервера Apache HTTP Server, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 64% Средний | больше 6 лет назад |
| openSUSE-SU-2019:1808-1 Security update for tomcat | почти 6 лет назад | ||
| openSUSE-SU-2019:1673-1 Security update for tomcat | почти 6 лет назад | ||
| SUSE-SU-2019:1895-1 Security update for tomcat | почти 6 лет назад | ||
| SUSE-SU-2019:1693-1 Security update for tomcat | почти 6 лет назад | ||
| SUSE-SU-2019:1866-1 Security update for tomcat | почти 6 лет назад |
Уязвимостей на страницу