https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 01:49:02 +0000 https://cve.radiocsirt.org/vuln/bdu:2020-04938 bdu:2020-04938 https://cve.radiocsirt.org/vuln/bdu:2020-04938 https://cve.radiocsirt.org/vuln/bit-tomcat-2020-13935 <p><strong>Affected:</strong> Bitnami: tomcat</p> <p>The payload length in a WebSocket frame was not correctly validated in Apache Tomcat 9.0.0 through 9.0.36, 8.5.0 to 8.5.56 and 7.0.27 to 7.0.104. Invalid payload lengths could trigger an infinite loop. Multiple requests with invalid payload lengths could lead to a denial of service.</p> <p><strong>Affected:</strong> Bitnami: tomcat</p> <p>The payload length in a WebSocket frame was not correctly validated in Apache Tomcat 9.0.0 through 9.0.36, 8.5.0 to 8.5.56 and 7.0.27 to 7.0.104. Invalid payload lengths could trigger an infinite loop. Multiple requests with invalid payload lengths could lead to a denial of service.</p> https://cve.radiocsirt.org/vuln/bit-tomcat-2020-13935 https://cve.radiocsirt.org/vuln/certfr-2020-avi-626 certfr-2020-avi-626 https://cve.radiocsirt.org/vuln/certfr-2020-avi-626 https://cve.radiocsirt.org/vuln/cnvd-2020-46230 cnvd-2020-46230 https://cve.radiocsirt.org/vuln/cnvd-2020-46230 https://cve.radiocsirt.org/vuln/euvd-2026-42094 EUVD-2026-42094 https://cve.radiocsirt.org/vuln/euvd-2026-42094 https://cve.radiocsirt.org/vuln/fkie_cve-2020-13935 <p>The payload length in a WebSocket frame was not correctly validated in Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M1 to 9.0.36, 8.5.0 to 8.5.56 and 7.0.27 to 7.0.104. Invalid payload lengths could trigger an infinite loop. Multiple requests with invalid payload lengths could lead to a denial of service.</p> <p>The payload length in a WebSocket frame was not correctly validated in Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M1 to 9.0.36, 8.5.0 to 8.5.56 and 7.0.27 to 7.0.104. Invalid payload lengths could trigger an infinite loop. Multiple requests with invalid payload lengths could lead to a denial of service.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-13935 https://cve.radiocsirt.org/vuln/ghsa-m7jv-hq7h-mq7c <p><strong>Affected:</strong> Maven: org.apache.tomcat:tomcat, Maven: org.apache.tomcat.embed:tomcat-embed-websocket, Maven: org.apache.tomcat:tomcat-websocket</p> <p>The payload length in a WebSocket frame was not correctly validated in Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M1 to 9.0.36, 8.5.0 to 8.5.56 and 7.0.27 to 7.0.104. Invalid payload lengths could trigger an infinite loop. Multiple requests with invalid payload lengths could lead to a denial of service.</p> <p><strong>Affected:</strong> Maven: org.apache.tomcat:tomcat, Maven: org.apache.tomcat.embed:tomcat-embed-websocket, Maven: org.apache.tomcat:tomcat-websocket</p> <p>The payload length in a WebSocket frame was not correctly validated in Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M1 to 9.0.36, 8.5.0 to 8.5.56 and 7.0.27 to 7.0.104. Invalid payload lengths could trigger an infinite loop. Multiple requests with invalid payload lengths could lead to a denial of service.</p> https://cve.radiocsirt.org/vuln/ghsa-m7jv-hq7h-mq7c https://cve.radiocsirt.org/vuln/gsd-2020-13935 gsd-2020-13935 https://cve.radiocsirt.org/vuln/gsd-2020-13935 https://cve.radiocsirt.org/vuln/opensuse-su-2020:1102-1 <p>Security update for tomcat</p> <p>Security update for tomcat</p> https://cve.radiocsirt.org/vuln/opensuse-su-2020:1102-1 https://cve.radiocsirt.org/vuln/rhsa-2020:3303 <p>tomcat: Mishandling of Transfer-Encoding header allows for HTTP request smuggling tomcat: multiple requests with invalid payload length in a WebSocket frame could lead to DoS</p> <p>tomcat: Mishandling of Transfer-Encoding header allows for HTTP request smuggling tomcat: multiple requests with invalid payload length in a WebSocket frame could lead to DoS</p> https://cve.radiocsirt.org/vuln/rhsa-2020:3303 https://cve.radiocsirt.org/vuln/suse-su-2020:2037-1 <p>Security update for tomcat</p> <p>Security update for tomcat</p> https://cve.radiocsirt.org/vuln/suse-su-2020:2037-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-13935 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: tomcat7, Ubuntu:16.04:LTS: tomcat8, Ubuntu:Pro:16.04:LTS: tomcat7, Ubuntu:Pro:18.04:LTS: tomcat8, Ubuntu:Pro:18.04:LTS: tomcat9, Ubuntu:20.04:LTS: tomcat9</p> <p>The payload length in a WebSocket frame was not correctly validated in Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M1 to 9.0.36, 8.5.0 to 8.5.56 and 7.0.27 to 7.0.104. Invalid payload lengths could trigger an infinite loop. Multiple requests with invalid payload lengths could lead to a denial of service.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: tomcat7, Ubuntu:16.04:LTS: tomcat8, Ubuntu:Pro:16.04:LTS: tomcat7, Ubuntu:Pro:18.04:LTS: tomcat8, Ubuntu:Pro:18.04:LTS: tomcat9, Ubuntu:20.04:LTS: tomcat9</p> <p>The payload length in a WebSocket frame was not correctly validated in Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M1 to 9.0.36, 8.5.0 to 8.5.56 and 7.0.27 to 7.0.104. Invalid payload lengths could trigger an infinite loop. Multiple requests with invalid payload lengths could lead to a denial of service.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-13935 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0519 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apache Tomcat ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Apache Tomcat ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0519