4.3

CVE-2020-13943

If an HTTP/2 client connecting to Apache Tomcat 10.0.0-M1 to 10.0.0-M7, 9.0.0.M1 to 9.0.37 or 8.5.0 to 8.5.57 exceeded the agreed maximum number of concurrent streams for a connection (in violation of the HTTP/2 protocol), it was possible that a subsequent request made on that connection could contain HTTP headers - including HTTP/2 pseudo headers - from a previous request rather than the intended headers. This could lead to users seeing responses for unexpected resources.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apache ≫ Tomcat Version 8.5.0
Apache ≫ Tomcat Version 8.5.1
Apache ≫ Tomcat Version 8.5.2
Apache ≫ Tomcat Version 8.5.3
Apache ≫ Tomcat Version 8.5.4
Apache ≫ Tomcat Version 8.5.5
Apache ≫ Tomcat Version 8.5.6
Apache ≫ Tomcat Version 8.5.7
Apache ≫ Tomcat Version 8.5.8
Apache ≫ Tomcat Version 8.5.9
Apache ≫ Tomcat Version 8.5.10
Apache ≫ Tomcat Version 8.5.11
Apache ≫ Tomcat Version 8.5.12
Apache ≫ Tomcat Version 8.5.13
Apache ≫ Tomcat Version 8.5.14
Apache ≫ Tomcat Version 8.5.15
Apache ≫ Tomcat Version 8.5.16
Apache ≫ Tomcat Version 8.5.17
Apache ≫ Tomcat Version 8.5.18
Apache ≫ Tomcat Version 8.5.19
Apache ≫ Tomcat Version 8.5.20
Apache ≫ Tomcat Version 8.5.21
Apache ≫ Tomcat Version 8.5.22
Apache ≫ Tomcat Version 8.5.23
Apache ≫ Tomcat Version 8.5.24
Apache ≫ Tomcat Version 8.5.25
Apache ≫ Tomcat Version 8.5.26
Apache ≫ Tomcat Version 8.5.27
Apache ≫ Tomcat Version 8.5.28
Apache ≫ Tomcat Version 8.5.29
Apache ≫ Tomcat Version 8.5.30
Apache ≫ Tomcat Version 8.5.31
Apache ≫ Tomcat Version 8.5.32
Apache ≫ Tomcat Version 8.5.33
Apache ≫ Tomcat Version 8.5.34
Apache ≫ Tomcat Version 8.5.35
Apache ≫ Tomcat Version 8.5.36
Apache ≫ Tomcat Version 8.5.37
Apache ≫ Tomcat Version 8.5.38
Apache ≫ Tomcat Version 8.5.39
Apache ≫ Tomcat Version 8.5.40
Apache ≫ Tomcat Version 8.5.41
Apache ≫ Tomcat Version 8.5.42
Apache ≫ Tomcat Version 8.5.43
Apache ≫ Tomcat Version 8.5.44
Apache ≫ Tomcat Version 8.5.45
Apache ≫ Tomcat Version 8.5.46
Apache ≫ Tomcat Version 8.5.47
Apache ≫ Tomcat Version 8.5.48
Apache ≫ Tomcat Version 8.5.49
Apache ≫ Tomcat Version 8.5.50
Apache ≫ Tomcat Version 8.5.51
Apache ≫ Tomcat Version 8.5.52
Apache ≫ Tomcat Version 8.5.53
Apache ≫ Tomcat Version 8.5.54
Apache ≫ Tomcat Version 8.5.55
Apache ≫ Tomcat Version 8.5.56
Apache ≫ Tomcat Version 8.5.57
Apache ≫ Tomcat Version 9.0.0 Update milestone10
Apache ≫ Tomcat Version 9.0.0 Update milestone11
Apache ≫ Tomcat Version 9.0.0 Update milestone12
Apache ≫ Tomcat Version 9.0.0 Update milestone13
Apache ≫ Tomcat Version 9.0.0 Update milestone14
Apache ≫ Tomcat Version 9.0.0 Update milestone15
Apache ≫ Tomcat Version 9.0.0 Update milestone16
Apache ≫ Tomcat Version 9.0.0 Update milestone17
Apache ≫ Tomcat Version 9.0.0 Update milestone18
Apache ≫ Tomcat Version 9.0.0 Update milestone19
Apache ≫ Tomcat Version 9.0.0 Update milestone20
Apache ≫ Tomcat Version 9.0.0 Update milestone21
Apache ≫ Tomcat Version 9.0.0 Update milestone22
Apache ≫ Tomcat Version 9.0.0 Update milestone23
Apache ≫ Tomcat Version 9.0.0 Update milestone24
Apache ≫ Tomcat Version 9.0.0 Update milestone25
Apache ≫ Tomcat Version 9.0.0 Update milestone26
Apache ≫ Tomcat Version 9.0.0 Update milestone27
Apache ≫ Tomcat Version 9.0.0 Update milestone5
Apache ≫ Tomcat Version 9.0.0 Update milestone6
Apache ≫ Tomcat Version 9.0.0 Update milestone7
Apache ≫ Tomcat Version 9.0.0 Update milestone8
Apache ≫ Tomcat Version 9.0.0 Update milestone9
Apache ≫ Tomcat Version 9.0.1
Apache ≫ Tomcat Version 9.0.2
Apache ≫ Tomcat Version 9.0.3
Apache ≫ Tomcat Version 9.0.4
Apache ≫ Tomcat Version 9.0.5
Apache ≫ Tomcat Version 9.0.6
Apache ≫ Tomcat Version 9.0.7
Apache ≫ Tomcat Version 9.0.8
Apache ≫ Tomcat Version 9.0.9
Apache ≫ Tomcat Version 9.0.10
Apache ≫ Tomcat Version 9.0.11
Apache ≫ Tomcat Version 9.0.12
Apache ≫ Tomcat Version 9.0.13
Apache ≫ Tomcat Version 9.0.14
Apache ≫ Tomcat Version 9.0.15
Apache ≫ Tomcat Version 9.0.16
Apache ≫ Tomcat Version 9.0.17
Apache ≫ Tomcat Version 9.0.18
Apache ≫ Tomcat Version 9.0.19
Apache ≫ Tomcat Version 9.0.20
Apache ≫ Tomcat Version 9.0.21
Apache ≫ Tomcat Version 9.0.22
Apache ≫ Tomcat Version 9.0.23
Apache ≫ Tomcat Version 9.0.24
Apache ≫ Tomcat Version 9.0.25
Apache ≫ Tomcat Version 9.0.26
Apache ≫ Tomcat Version 9.0.27
Apache ≫ Tomcat Version 9.0.28
Apache ≫ Tomcat Version 9.0.29
Apache ≫ Tomcat Version 9.0.30
Apache ≫ Tomcat Version 9.0.31
Apache ≫ Tomcat Version 9.0.32
Apache ≫ Tomcat Version 9.0.33
Apache ≫ Tomcat Version 9.0.34
Apache ≫ Tomcat Version 9.0.35
Apache ≫ Tomcat Version 9.0.36
Apache ≫ Tomcat Version 9.0.37
Apache ≫ Tomcat Version 10.0.0 Update milestone1
Apache ≫ Tomcat Version 10.0.0 Update milestone2
Apache ≫ Tomcat Version 10.0.0 Update milestone3
Apache ≫ Tomcat Version 10.0.0 Update milestone4
Apache ≫ Tomcat Version 10.0.0 Update milestone5
Apache ≫ Tomcat Version 10.0.0 Update milestone6
Apache ≫ Tomcat Version 10.0.0 Update milestone7
Debian ≫ Debian Linux Version 9.0
Debian ≫ Debian Linux Version 10.0
Oracle ≫ Sd-wan Edge Version 9.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 57.29% 0.989
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.3 2.8 1.4
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
NIST 4 8 2.9
AV:N/AC:L/Au:S/C:P/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://www.oracle.com/security-alerts/cpuApr2021.html
Patch
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00002.html
Third Party Advisory
Mailing List
http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00021.html
Broken Link
https://lists.apache.org/thread.html/r4a390027eb27e4550142fac6c8317cc684b157ae314d31514747f307%40%3Cannounce.tomcat.apache.org%3E
Vendor Advisory
https://lists.debian.org/debian-lts-announce/2020/10/msg00019.html
Third Party Advisory
https://security.netapp.com/advisory/ntap-20201016-0007/
Third Party Advisory
https://www.debian.org/security/2021/dsa-4835
Third Party Advisory