Denial Of Service (DoS)

org.apache.tomcat: tomcat-coyote is vulnerable to Denial of Service (DoS). The vulnerability is due to improper handling of excessive HTTP headers in HTTP/2 streams, which leads to the miscounting of active streams resulting in an infinite connection timeout. This allows connections to remain open longer than intended, allowing an attacker to cause Denial of Service (DoS) due to resource exhaustion or the open connections reaching the maxConnections limit.