logo
DATABASE RESOURCES PRICING ABOUT US

Uncontrolled Resource Consumption in Apache Tomcat

Description

A specially crafted sequence of HTTP/2 requests sent to Apache Tomcat 10.0.0-M1 to 10.0.0-M5, 9.0.0.M1 to 9.0.35 and 8.5.0 to 8.5.55 could trigger high CPU usage for several seconds. If a sufficient number of such requests were made on concurrent HTTP/2 connections, the server could become unresponsive.


Affected Software


CPE Name Name Version
org.apache.tomcat:tomcat 8.5.0
org.apache.tomcat:tomcat 8.5.11
org.apache.tomcat:tomcat 8.5.12
org.apache.tomcat:tomcat 8.5.13
org.apache.tomcat:tomcat 8.5.14
org.apache.tomcat:tomcat 8.5.15
org.apache.tomcat:tomcat 8.5.16
org.apache.tomcat:tomcat 8.5.19
org.apache.tomcat:tomcat 8.5.2
org.apache.tomcat:tomcat 8.5.20
org.apache.tomcat:tomcat 8.5.21
org.apache.tomcat:tomcat 8.5.23
org.apache.tomcat:tomcat 8.5.24
org.apache.tomcat:tomcat 8.5.27
org.apache.tomcat:tomcat 8.5.28
org.apache.tomcat:tomcat 8.5.29
org.apache.tomcat:tomcat 8.5.3
org.apache.tomcat:tomcat 8.5.30
org.apache.tomcat:tomcat 8.5.31
org.apache.tomcat:tomcat 8.5.32
org.apache.tomcat:tomcat 8.5.33
org.apache.tomcat:tomcat 8.5.34
org.apache.tomcat:tomcat 8.5.35
org.apache.tomcat:tomcat 8.5.37
org.apache.tomcat:tomcat 8.5.38
org.apache.tomcat:tomcat 8.5.39
org.apache.tomcat:tomcat 8.5.4
org.apache.tomcat:tomcat 8.5.40
org.apache.tomcat:tomcat 8.5.41
org.apache.tomcat:tomcat 8.5.42
org.apache.tomcat:tomcat 8.5.43
org.apache.tomcat:tomcat 8.5.45
org.apache.tomcat:tomcat 8.5.46
org.apache.tomcat:tomcat 8.5.47
org.apache.tomcat:tomcat 8.5.49
org.apache.tomcat:tomcat 8.5.5
org.apache.tomcat:tomcat 8.5.50
org.apache.tomcat:tomcat 8.5.51
org.apache.tomcat:tomcat 8.5.53
org.apache.tomcat:tomcat 8.5.54
org.apache.tomcat:tomcat 8.5.6
org.apache.tomcat:tomcat 8.5.8
org.apache.tomcat:tomcat 8.5.9

Related