Test Kennung:	1.3.6.1.4.1.25623.1.0.142811
Kategorie:	Denial of Service
Titel:	Apache Tomcat DoS Vulnerability (Jun 2019) - Linux
Zusammenfassung:	Apache Tomcat is prone to a denial of service vulnerability.
Beschreibung:	Summary: Apache Tomcat is prone to a denial of service vulnerability. Vulnerability Insight: The fix for CVE-2019-0199 was incomplete and did not address HTTP/2 connection window exhaustion on write. By not sending WINDOW_UPDATE messages for the connection window (stream 0) clients are able to cause server-side threads to block eventually leading to thread exhaustion and a DoS. Affected Software/OS: Apache Tomcat versions 8.5.0 to 8.5.40 and 9.0.0.M1 to 9.0.19. Solution: Update to version 8.5.41, 9.0.20 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2019-10072 BugTraq ID: 108874 http://www.securityfocus.com/bid/108874 https://security.netapp.com/advisory/ntap-20190625-0002/ https://support.f5.com/csp/article/K17321505 https://www.synology.com/security/advisory/Synology_SA_19_29 Debian Security Information: DSA-4680 (Google Search) https://www.debian.org/security/2020/dsa-4680 https://lists.apache.org/thread.html/df1a2c1b87c8a6c500ecdbbaf134c7f1491c8d79d98b48c6b9f0fa6a@%3Cannounce.tomcat.apache.org%3E https://www.oracle.com/security-alerts/cpuApr2021.html https://www.oracle.com/security-alerts/cpuapr2020.html https://www.oracle.com/security-alerts/cpujan2020.html https://www.oracle.com/security-alerts/cpuoct2020.html https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html https://lists.apache.org/thread.html/r6ccee4e849bc77df0840c7f853f6bd09d426f6741247da2b7429d5d9@%3Cdev.tomcat.apache.org%3E https://lists.apache.org/thread.html/r3bbb800a816d0a51eccc5a228c58736960a9fffafa581a225834d97d@%3Cdev.tomcat.apache.org%3E https://lists.apache.org/thread.html/raba0fabaf4d56d4325ab2aca8814f0b30a237ab83d8106b115ee279a@%3Cdev.tomcat.apache.org%3E https://lists.apache.org/thread.html/r48c1444845fe15a823e1374674bfc297d5008a5453788099ea14caf0@%3Cdev.tomcat.apache.org%3E RedHat Security Advisories: RHSA-2019:3929 https://access.redhat.com/errata/RHSA-2019:3929 RedHat Security Advisories: RHSA-2019:3931 https://access.redhat.com/errata/RHSA-2019:3931 SuSE Security Announcement: openSUSE-SU-2020:0038 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00013.html https://usn.ubuntu.com/4128-1/ https://usn.ubuntu.com/4128-2/
Copyright	Copyright (C) 2019 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.