190 matches found
DLA-2594-1 tomcat8 - security update
Bulletin has no description...
Amazon Linux AMI : tomcat8 (ALAS-2021-1473)
The version of tomcat8 installed on the remote host is prior to 8.5.60-1.86. It is, therefore, affected by a vulnerability as referenced in the ALAS-2021-1473 advisory. While investigating bug 64830 it was discovered that Apache Tomcat 10.0.0-M1 to 10.0.0-M9, 9.0.0-M1 to 9.0.39 and 8.5.0 to 8.5.5...
Amazon Linux AMI : tomcat8 (ALAS-2020-1473) (deprecated)
The version of tested product installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the ALAS-2020-1473 advisory. - While investigating bug 64830 it was discovered that Apache Tomcat 10.0.0-M1 to 10.0.0-M9, 9.0.0-M1 to 9.0.39 and...
Debian DLA-2495-1 : tomcat8 security update
It was discovered that Apache Tomcat from 8.5.0 to 8.5.59 could re-use an HTTP request header value from the previous stream received on an HTTP/2 connection for the request associated with the subsequent stream. While this would most likely lead to an error and the closure of the HTTP/2...
Debian: Security Advisory (DLA-2495-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
DLA-2495-1 tomcat8 - security update
Bulletin has no description...
Debian: Security Advisory (DLA-2407-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
DLA-2407-1 tomcat8 - security update
Bulletin has no description...
Ubuntu: Security Advisory (USN-4448-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Amazon Linux AMI : tomcat8 (ALAS-2020-1409)
The version of tomcat8 installed on the remote host is prior to 8.5.57-1.85. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS-2020-1409 advisory. The payload length in a WebSocket frame was not correctly validated in Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M1 t...
Debian: Security Advisory (DLA-2286-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DLA-2286-1 : tomcat8 security update
Several security vulnerabilities have been discovered in the Tomcat servlet and JSP engine. CVE-2020-13934 An h2c direct connection to Apache Tomcat did not release the HTTP/1.1 processor after the upgrade to HTTP/2. If a sufficient number of such requests were made, an OutOfMemoryException could...
[SECURITY] [DLA 2286-1] tomcat8 security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-2286-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany July 22, 2020 https://wiki.debian.org/LTS -...
DLA-2286-1 tomcat8 - security update
Bulletin has no description...
[SECURITY] [DLA 2279-1] tomcat8 security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-2279-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany July 12, 2020 https://wiki.debian.org/LTS -...
DLA-2279-1 tomcat8 - security update
Bulletin has no description...
[ASA-202006-5] tomcat8: arbitrary code execution
Arch Linux Security Advisory ASA-202006-5 ========================================= Severity: High Date : 2020-06-06 CVE-ID : CVE-2020-9484 Package : tomcat8 Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-1170 Summary ======= The package tomcat8 before...
Debian: Security Advisory (DLA-2209-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 2209-1] tomcat8 security update
Package : tomcat8 Version : 8.0.14-1+deb8u17 CVE ID : CVE-2019-17563 CVE-2020-1935 CVE-2020-1938 CVE-2020-9484 Debian Bug : 961209 952436 952437 952438 Several security vulnerabilities have been discovered in the Tomcat servlet and JSP engine. WARNING: The fix for CVE-2020-1938 may disrupt servic...