Vulnerability Database
289,599
Total vulnerabilities in the database
CVE-2020-13935
The payload length in a WebSocket frame was not correctly validated in Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M1 to 9.0.36, 8.5.0 to 8.5.56 and 7.0.27 to 7.0.104. Invalid payload lengths could trigger an infinite loop. Multiple requests with invalid payload lengths could lead to a denial of service.
| Software | From | Fixed in |
|---|---|---|
| apache / tomcat | 9.0.0-milestone1 | 9.0.0-milestone1.x |
| apache / tomcat | 9.0.0-milestone10 | 9.0.0-milestone10.x |
| apache / tomcat | 9.0.0-milestone11 | 9.0.0-milestone11.x |
| apache / tomcat | 9.0.0-milestone12 | 9.0.0-milestone12.x |
| apache / tomcat | 9.0.0-milestone13 | 9.0.0-milestone13.x |
| apache / tomcat | 9.0.0-milestone14 | 9.0.0-milestone14.x |
| apache / tomcat | 9.0.0-milestone15 | 9.0.0-milestone15.x |
| apache / tomcat | 9.0.0-milestone16 | 9.0.0-milestone16.x |
| apache / tomcat | 9.0.0-milestone17 | 9.0.0-milestone17.x |
| apache / tomcat | 9.0.0-milestone18 | 9.0.0-milestone18.x |
| apache / tomcat | 9.0.0-milestone19 | 9.0.0-milestone19.x |
| apache / tomcat | 9.0.0-milestone2 | 9.0.0-milestone2.x |
| apache / tomcat | 9.0.0-milestone20 | 9.0.0-milestone20.x |
| apache / tomcat | 9.0.0-milestone21 | 9.0.0-milestone21.x |
| apache / tomcat | 9.0.0-milestone22 | 9.0.0-milestone22.x |
| apache / tomcat | 9.0.0-milestone23 | 9.0.0-milestone23.x |
| apache / tomcat | 9.0.0-milestone24 | 9.0.0-milestone24.x |
| apache / tomcat | 9.0.0-milestone25 | 9.0.0-milestone25.x |
| apache / tomcat | 9.0.0-milestone26 | 9.0.0-milestone26.x |
| apache / tomcat | 9.0.0-milestone27 | 9.0.0-milestone27.x |
| apache / tomcat | 9.0.0-milestone3 | 9.0.0-milestone3.x |
| apache / tomcat | 9.0.0-milestone4 | 9.0.0-milestone4.x |
| apache / tomcat | 9.0.0-milestone5 | 9.0.0-milestone5.x |
| apache / tomcat | 9.0.0-milestone6 | 9.0.0-milestone6.x |
| apache / tomcat | 9.0.0-milestone7 | 9.0.0-milestone7.x |
| apache / tomcat | 9.0.0-milestone8 | 9.0.0-milestone8.x |
| apache / tomcat | 9.0.0-milestone9 | 9.0.0-milestone9.x |
| apache / tomcat | 10.0.0-milestone3 | 10.0.0-milestone3.x |
| apache / tomcat | 10.0.0-milestone4 | 10.0.0-milestone4.x |
| apache / tomcat | 10.0.0-milestone2 | 10.0.0-milestone2.x |
| apache / tomcat | 10.0.0-milestone1 | 10.0.0-milestone1.x |
| apache / tomcat | 10.0.0-milestone5 | 10.0.0-milestone5.x |
| apache / tomcat | 10.0.0-milestone6 | 10.0.0-milestone6.x |
| apache / tomcat | 9.0.1 | 9.0.36.x |
| apache / tomcat | 7.0.27 | 7.0.104.x |
| apache / tomcat | 8.5.0 | 8.5.56.x |
| debian / debian_linux | 9.0 | 9.0.x |
| debian / debian_linux | 10.0 | 10.0.x |
| netapp / oncommand_system_manager | 3.0.0 | 3.1.3.x |
| opensuse / leap | 15.1 | 15.1.x |
| opensuse / leap | 15.2 | 15.2.x |
| canonical / ubuntu_linux | 20.04 | 20.04.x |
| canonical / ubuntu_linux | 16.04 | 16.04.x |
| mcafee / epolicy_orchestrator | 5.9.0 | 5.9.0.x |
| mcafee / epolicy_orchestrator | 5.9.1 | 5.9.1.x |
| mcafee / epolicy_orchestrator | 5.10.0-update_1 | 5.10.0-update_1.x |
| mcafee / epolicy_orchestrator | 5.10.0-update_2 | 5.10.0-update_2.x |
| mcafee / epolicy_orchestrator | 5.10.0-update_3 | 5.10.0-update_3.x |
| mcafee / epolicy_orchestrator | 5.10.0-update_4 | 5.10.0-update_4.x |
| mcafee / epolicy_orchestrator | 5.10.0-update_5 | 5.10.0-update_5.x |
| mcafee / epolicy_orchestrator | 5.10.0-update_6 | 5.10.0-update_6.x |
| mcafee / epolicy_orchestrator | 5.10.0 | 5.10.0.x |
| mcafee / epolicy_orchestrator | 5.10.0-update_7 | 5.10.0-update_7.x |
| mcafee / epolicy_orchestrator | 5.10.0-update_8 | 5.10.0-update_8.x |
| oracle / managed_file_transfer | 12.2.1.3.0 | 12.2.1.3.0.x |
| oracle / instantis_enterprisetrack | 17.1 | 17.1.x |
| oracle / instantis_enterprisetrack | 17.2 | 17.2.x |
| oracle / instantis_enterprisetrack | 17.3 | 17.3.x |
| oracle / agile_plm | 9.3.3 | 9.3.3.x |
| oracle / agile_plm | 9.3.5 | 9.3.5.x |
| oracle / agile_plm | 9.3.6 | 9.3.6.x |
| oracle / workload_manager | 18c | 18c.x |
| oracle / workload_manager | 19c | 19c.x |
| oracle / workload_manager | 12.2.0.1 | 12.2.0.1.x |
| oracle / agile_engineering_data_management | 6.2.1.0 | 6.2.1.0.x |
| oracle / siebel_ui_framework | - | 20.12.x |
| oracle / mysql_enterprise_monitor | - | 8.0.21.x |
| oracle / managed_file_transfer | 12.2.1.4.0 | 12.2.1.4.0.x |
| oracle / commerce_guided_search | 11.3.2 | 11.3.2.x |
| oracle / fmw_platform | 12.2.1.4.0 | 12.2.1.4.0.x |
| oracle / fmw_platform | 12.2.1.3.0 | 12.2.1.3.0.x |
| oracle / communications_cloud_native_core_policy | 1.14.0 | 1.14.0.x |
| oracle / communications_instant_messaging_server | 10.0.1.5.0 | 10.0.1.5.0.x |
| oracle / blockchain_platform | - | 21.1.2 |
org.apache.tomcat / tomcat
|
10.0.0-M1 | 10.0.0-M6 |
|
org.apache.tomcat / tomcat
|
9.0.0.M1 | 9.0.36 |
|
org.apache.tomcat / tomcat
|
8.5.0 | 8.5.56 |
|
org.apache.tomcat / tomcat
|
7.0.27 | 7.0.104 |
- http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00084.html
- http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00088.html
- https://kc.mcafee.com/corporate/index?page=content&id=SB10332
- https://lists.apache.org/thread.html/r4e5d3c09f4dd2923191e972408b40fb8b42dbff0bc7904d44b651e50@%3Cusers.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/r4e5d3c09f4dd2923191e972408b40fb8b42dbff0bc7904d44b651e50%40%3Cusers.tomcat.apache.org%3E
- https://lists.apache.org/thread.html/rd48c72bd3255bda87564d4da3791517c074d94f8a701f93b85752651%40%3Cannounce.tomcat.apache.org%3E
- https://lists.debian.org/debian-lts-announce/2020/07/msg00017.html
- https://security.netapp.com/advisory/ntap-20200724-0003/
- https://usn.ubuntu.com/4448-1/
- https://usn.ubuntu.com/4596-1/
- https://www.debian.org/security/2020/dsa-4727
- https://www.oracle.com//security-alerts/cpujul2021.html
- https://www.oracle.com/security-alerts/cpuApr2021.html
- https://www.oracle.com/security-alerts/cpuapr2022.html
- https://www.oracle.com/security-alerts/cpujan2021.html
- https://www.oracle.com/security-alerts/cpujan2022.html
- https://www.oracle.com/security-alerts/cpuoct2020.html
- https://www.oracle.com/security-alerts/cpuoct2021.html