Linux Distros Unpatched Vulnerability : CVE-2020-13934

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An h2c direct connection to Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M5 to 9.0.36 and 8.5.1 to 8.5.56 did not release the HTTP/1.1 processor after the upgrad...

com.addc:addc-svr-tomcat (>=2.5, <=2.9), com.cloudera.oryx:oryx-lambda-serving (>=2.3.0, <=2.5.0) +115 more potentially affected by CVE-2020-13934 via org.apache.tomcat:tomcat-coyote (>=8.5.2, <=8.5.55)

org.apache.tomcat:tomcat-coyote MAVEN version =8.5.2, =2.5, =2.3.0, =1.0.0, =1.6.1, =1.0.0, =1.0.4, =3.0.0.rc2, =3.0.0.rc2, =1.8.2, =2.1, =1.0.0, =0.0.4, =0.1.0 and more Source cves: CVE-2020-13934 Source advisory: OSV:GHSA-VF77-8H7G-GGHP...

com.cloudera.oryx:oryx-lambda-serving (>=2.6.0, <=2.8.0), com.exactpro.sf:sailfish-frontend (>=3.2.1036, <=3.2.1881) +114 more potentially affected by CVE-2020-13934 via org.apache.tomcat:tomcat-coyote (>=9.0.0.m6, <=9.0.35)

org.apache.tomcat:tomcat-coyote MAVEN version =9.0.0.m6, =2.6.0, =3.2.1036, =1.3.1, =3.1.0, =3.0.0.rc2, =1.8.2, =2.1, =y, =1.0-alpha-1, =0.1.0, =1.0.0-rc, =1.4.1 and more Source cves: CVE-2020-13934 Source advisory: OSV:GHSA-VF77-8H7G-GGHP...

org.apache.tomee:apache-tomee (>=7.0.0, <=7.1.3), org.apache.tomee:arquillian-tomee-codi-tests (>=7.0.0, <=7.1.3) +8 more potentially affected by CVE-2020-13934 via org.apache.tomcat:tomcat (>=8.5.2, <=8.5.55)

org.apache.tomcat:tomcat MAVEN version =8.5.2, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =7.0.0, =5.21.0, =5.20.0, =5.20.4 Source cves: CVE-2020-13934 Source advisory: OSV:GHSA-VF77-8H7G-GGHP...

com.github.hazendaz.tomcat:tomcat9-config (>=9.0.31, <=9.0.35), org.apache.juddi:juddi-tomcat (>=3.3.6, <=3.3.8) +10 more potentially affected by CVE-2020-13934 via org.apache.tomcat:tomcat (>=9.0.10, <=9.0.35)

org.apache.tomcat:tomcat MAVEN version =9.0.10, =9.0.31, =3.3.6, =3.3.6, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =8.0.0-m1, =5.22.2, =5.23.5.1 Source cves: CVE-2020-13934 Source advisory: GHSA-VF77-8H7G-GGHP...

com.cloudera.oryx:oryx-lambda-serving (>=2.6.0, <=2.8.0), com.exactpro.sf:sailfish-frontend (>=3.2.1036, <=3.2.1881) +114 more potentially affected by CVE-2020-13934 via org.apache.tomcat:tomcat-coyote (>=9.0.0.m6, <=9.0.35)

org.apache.tomcat:tomcat-coyote MAVEN version =9.0.0.m6, =2.6.0, =3.2.1036, =1.3.1, =3.1.0, =3.0.0.rc2, =1.8.2, =2.1, =y, =1.0-alpha-1, =0.1.0, =1.0.0-rc, =1.4.1 and more Source cves: CVE-2020-13934 Source advisory: GHSA-VF77-8H7G-GGHP...

com.addc:addc-svr-tomcat (>=2.5, <=2.9), com.cloudera.oryx:oryx-lambda-serving (>=2.3.0, <=2.5.0) +115 more potentially affected by CVE-2020-13934 via org.apache.tomcat:tomcat-coyote (>=8.5.2, <=8.5.55)

org.apache.tomcat:tomcat-coyote MAVEN version =8.5.2, =2.5, =2.3.0, =1.0.0, =1.6.1, =1.0.0, =1.0.4, =3.0.0.rc2, =3.0.0.rc2, =1.8.2, =2.1, =1.0.0, =0.0.4, =0.1.0 and more Source cves: CVE-2020-13934 Source advisory: GHSA-VF77-8H7G-GGHP...

com.github.waffle:waffle-tomcat10 (2.3.0), org.apache.tomcat:tomcat-catalina (>=10.0.0-m1, <=10.0.0-m5) +5 more potentially affected by CVE-2020-13934 via org.apache.tomcat:tomcat-coyote (>=10.0.0-m1, <=10.0.0-m5)

org.apache.tomcat:tomcat-coyote MAVEN version =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =10.0.0-m1, =3.0.0-m2, =10.0.0.beta1, =10.0.0.beta1, =10.0.0.final Source cves: CVE-2020-13934 Source advisory: GHSA-VF77-8H7G-GGHP...

Apache Tomcat 10.0.0.M1 < 10.0.0.M7 multiple vulnerabilities

The version of Tomcat installed on the remote host is prior to 10.0.0.M7. It is, therefore, affected by multiple vulnerabilities as referenced in the fixedinapachetomcat10.0.0-m7security-10 advisory. - The payload length in a WebSocket frame was not correctly validated in Apache Tomcat 10.0.0-M1 ...

SUSE: Security Advisory (SUSE-SU-2020:2046-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2020:2047-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2020:2045-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

JFrog < 7.7.0 Multiple Vulnerabilities

According to its self-reported version number, the version of JFrog Artifactory installed on the remote host is prior to 7.7.0. It is, therefore, affected by multiple vulnerabilities: - An h2c direct connection to Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M5 to 9.0.36 and 8.5.1 to 8.5.56 did no...

Ubuntu 20.04 LTS : Tomcat vulnerabilities (USN-4596-1)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4596-1 advisory. It was discovered that Tomcat did not properly manage HTTP/2 streams. An attacker could possibly use this to cause Tomcat to consume resources, resulting...

USN-4596-1: Tomcat vulnerabilities

It was discovered that Tomcat did not properly manage HTTP/2 streams. An attacker could possibly use this to cause Tomcat to consume resources, resulting in a denial of service. CVE-2020-11996 It was discovered that Tomcat did not properly release the HTTP/1.1 processor after the upgrade to HTTP/...

Important: Red Hat Security Advisory: Red Hat support for Spring Boot 2.2.6.SP2 security update

An update is now available for Red Hat OpenShift Application Runtimes. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

Security Bulletin: Vulnerabilities in Apache Tomcat affects IBM Platform Symphony

Summary This interim fix provides instructions on upgrading Apache Tomcat to v8.5.57 in IBM Platform Symphony 7.1 Fix Pack 1 in order to address security vulnerabilities CVE-2020-9484, CVE-2020-11996, CVE-2020-13934, and CVE-2020-13935 in Apache Tomcat. Vulnerability Details CVEID: CVE-2020-13934...

Important: Red Hat Security Advisory: Red Hat JBoss Web Server 5.3.2 security update

Updated Red Hat JBoss Web Server 5.3.2 packages are now available for Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8 and Windows. Red Hat Product Security has rated this release as having a security impact of Important. A Common Vulnerability Scoring System CVS...

Important: Red Hat Security Advisory: Red Hat JBoss Web Server 5.3.2 security update

Updated Red Hat JBoss Web Server 5.3.2 packages are now available for Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, and Red Hat Enterprise Linux 8. Red Hat Product Security has rated this release as having a security impact of Important. A Common Vulnerability Scoring System CVSS base...

RHEL 6 / 7 / 8 : Red Hat JBoss Web Server 5.3.2 (RHSA-2020:3306)

The remote Redhat Enterprise Linux 6 / 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3306 advisory. Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of...