Lucene search

K
f5F5F5:K19240391
HistoryJul 07, 2020 - 12:00 a.m.

K19240391 : Apache Tomcat vulnerability CVE-2020-11996

2020-07-0700:00:00
my.f5.com
26

7.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.8%

Security Advisory Description

A specially crafted sequence of HTTP/2 requests sent to Apache Tomcat 10.0.0-M1 to 10.0.0-M5, 9.0.0.M1 to 9.0.35 and 8.5.0 to 8.5.55 could trigger high CPU usage for several seconds. If a sufficient number of such requests were made on concurrent HTTP/2 connections, the server could become unresponsive. (CVE-2020-11996)

Impact

There is no impact; F5 products are not affected by this vulnerability.