Infinite Loop in Apache Tomcat

🗓️ 08 Feb 2022 22:05:17Reported by GitHub Advisory DatabaseType

github🔗 github.com👁 112 Views

Apache Tomcat WebSocket frame validation issu

Reporter	Title	Published	Views	Family All 238
GithubExploit	Exploit for Infinite Loop in Apache Tomcat	2 Nov 202014:48	–	githubexploit
GithubExploit	pt-esign__Damn-vulnerable-sca	10 Aug 202620:56	–	githubexploit
IBM Security Bulletins	Security Bulletin: IBM Cognos Business Intelligence has addressed multiple vulnerabilities (Q12021)	29 Jan 202118:58	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to Using Components with Known Vulnerabilities	7 Oct 202022:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Resilient SOAR is Using Components with Known Vulnerabilities - Apache Tomcat 7.099 (CVE-2020-13935)	31 Aug 202021:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Cast Iron Solution & App Connect Professional is affected by Apache Tomcat vulnerabilities.	27 Oct 202013:41	–	ibm
IBM Security Bulletins	Security Bulletin: IBM UrbanCode Release is affected by CVE-2020-13935	25 Jan 202207:37	–	ibm
IBM Security Bulletins	Security Bulletin: Open Source Apache Tomcat vulnerabilities affect IBM Tivoli Application Dependency Discovery Manager (CVE-2020-13935)	30 Sep 202013:43	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in Apache Tomcat affects the IBM FlashSystem models 840 and 900	15 Apr 202117:44	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Apache Tomcat Vulnerabilities Affect IBM Control Center	14 May 202121:27	–	ibm

Vulners

Node

org.apache.tomcat tomcatRange7.0.27–7.0.105maven

org.apache.tomcat tomcatRange8.5.0–8.5.57maven

org.apache.tomcat tomcatRange9.0.0.M1–9.0.37maven

org.apache.tomcat tomcatRange10.0.0-M1–10.0.0-M7maven

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-13935
kc	www.kc.mcafee.com/corporate/index
lists	www.lists.apache.org/thread.html/r4e5d3c09f4dd2923191e972408b40fb8b42dbff0bc7904d44b651e50@%3Cusers.tomcat.apache.org%3E
lists	www.lists.apache.org/thread.html/rd48c72bd3255bda87564d4da3791517c074d94f8a701f93b85752651%40%3Cannounce.tomcat.apache.org%3E
lists	www.lists.debian.org/debian-lts-announce/2020/07/msg00017.html
debian	www.debian.org/security/2020/dsa-4727
oracle	www.oracle.com/security-alerts/cpujan2021.html
oracle	www.oracle.com/security-alerts/cpuoct2020.html
lists	www.lists.opensuse.org/opensuse-security-announce/2020-07/msg00084.html
lists	www.lists.opensuse.org/opensuse-security-announce/2020-07/msg00088.html

25 Aug 2026 18:32Current

1.9Low risk

Vulners AI Score1.9

CVSS 25

CVSS 3.17.5

EPSS0.86608