Most recent entries from all

BIT-tomcat-2020-17527 — Apache Tomcat: Request header mix-up between HTTP/2 streams

Affected: Bitnami: tomcat

While investigating bug 64830 it was discovered that Apache Tomcat 9.0.0 through 9.0.39 and 8.5.0 to 8.5.59 could re-use an HTTP request header value from the previous stream received on an HTTP/2 connection for the request associated with the subsequent stream. While this would most likely lead to an error and the closure of the HTTP/2 connection, it is possible that information could leak between requests.

certfr-2020-avi-792 — Une vulnérabilité a été découverte dans Apache Tomcat. Elle permet à un attaquant de provoquer une atteinte à la confid…

certfr-2020-avi-792

EUVD-2026-215932

fkie_cve-2020-17527

While investigating bug 64830 it was discovered that Apache Tomcat 10.0.0-M1 to 10.0.0-M9, 9.0.0-M1 to 9.0.39 and 8.5.0 to 8.5.59 could re-use an HTTP request header value from the previous stream received on an HTTP/2 connection for the request associated with the subsequent stream. While this would most likely lead to an error and the closure of the HTTP/2 connection, it is possible that information could leak between requests.

GHSA-vvw4-rfwf-p6hx — Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat

Affected: Maven: org.apache.tomcat:tomcat-coyote

gsd-2020-17527

msrc_CVE-2020-17527 — Apache Tomcat: Request header mix-up between HTTP/2 streams

msrc_CVE-2020-17527

openSUSE-SU-2021:0043-1 — Security update for tomcat

Security update for tomcat

RHSA-2021:0494 — Red Hat Security Advisory: Red Hat JBoss Web Server 5.4.1 Security Update

openssl: EDIPARTYNAME NULL pointer de-reference tomcat: Apache Tomcat HTTP/2 Request mix-up tomcat: HTTP/2 request header mix-up tomcat: Information disclosure when using NTFS file system

SUSE-SU-2021:0031-1 — Security update for tomcat

Security update for tomcat

UBUNTU-CVE-2020-17527

Affected: Ubuntu:18.04:LTS: tomcat9, Ubuntu:Pro:18.04:LTS: tomcat8, Ubuntu:20.04:LTS: tomcat9

WID-SEC-W-2023-0065 — Oracle MySQL: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle MySQL ausnutzen, um die Verfügbarkeit, Vertraulichkeit und Integrität zu gefährden.