Lucene search

K
redhatcveRedhat.comRH:CVE-2019-0199
HistoryMar 27, 2019 - 2:58 p.m.

CVE-2019-0199

2019-03-2714:58:56
redhat.com
access.redhat.com
20

EPSS

0.727

Percentile

98.1%

A flaw was found in Apache Tomcat, where the HTTP/2 implementation accepted streams with excessive numbers of SETTINGS frames and also permitted clients to keep streams open, which enables them to cause server-side threads to block. This flaw eventually leads to a denial of service attack.