Lucene search
F5F5:K45026834HistoryAug 27, 2020 - 12:00 a.m.
K45026834 : Apache Tomcat vulnerability CVE-2020-13935
2020-08-2700:00:00
my.f5.com
23
Security Advisory Description
The payload length in a WebSocket frame was not correctly validated in Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M1 to 9.0.36, 8.5.0 to 8.5.56 and 7.0.27 to 7.0.104. Invalid payload lengths could trigger an infinite loop. Multiple requests with invalid payload lengths could lead to a denial of service. (CVE-2020-13935)
Impact
An attacker who can submit multiple requests with invalid payload lengths can cause a denial of service (DoS).
Related
kaspersky
kaspersky
KLA12084 DoS vulnerability in Apache Tomcat
2020-07-07 00:00:00
KLA12083 DoS vulnerabilities in Apache Tomcat
2020-07-05 00:00:00
redhatcve
redhatcve
CVE-2020-13935
2020-07-15 06:37:38
CVE-2020-14384
2020-09-03 22:19:33
nessus
nessus
EulerOS 2.0 SP2 : tomcat (EulerOS-SA-2020-2401)
2020-11-03 00:00:00
Apache Tomcat 7.0.27 < 7.0.105
2020-07-23 00:00:00
EulerOS 2.0 SP5 : tomcat (EulerOS-SA-2020-2274)
2020-10-30 00:00:00
ibm
ibm
veracode
veracode
Denial Of Service (DoS)
2020-07-15 08:18:40
Denial-of-Service (DoS)
2020-09-15 01:53:24
githubexploit
githubexploit
Exploit for Infinite Loop in Apache Tomcat
2020-11-02 14:48:55
debiancve
debiancve
CVE-2020-13935
2020-07-14 15:15:11
prion
prion
Denial of service
2020-07-14 15:15:00
Design/Logic Flaw
2020-09-09 14:15:00
osv
osv
Infinite Loop in Apache Tomcat
2022-02-08 22:05:17
BIT-tomcat-2020-13935
2024-03-06 11:11:44
tomcat8 - security update
2020-07-22 00:00:00
nvd
nvd
CVE-2020-13935
2020-07-14 15:15:11
CVE-2020-14384
2020-09-09 14:15:12
openvas
openvas
Huawei EulerOS: Security Advisory for tomcat (EulerOS-SA-2020-2274)
2020-10-30 00:00:00
Huawei EulerOS: Security Advisory for tomcat (EulerOS-SA-2020-2401)
2020-11-04 00:00:00
SUSE: Security Advisory (SUSE-SU-2020:2046-1)
2021-06-09 00:00:00
tomcat
tomcat
Fixed in Apache Tomcat 7.0.105
2020-07-07 00:00:00
Fixed in Apache Tomcat 10.0.0-M7
2020-07-05 00:00:00
Fixed in Apache Tomcat 8.5.57
2020-07-05 00:00:00
redhat
redhat
(RHSA-2020:3382) Important: Red Hat JBoss Enterprise Application Platform 6.4 security update
2020-08-10 11:16:43
(RHSA-2020:3383) Important: Red Hat JBoss Enterprise Application Platform 6.4 security update
2020-08-10 11:16:49
(RHSA-2020:3306) Important: Red Hat JBoss Web Server 5.3.2 security update
2020-08-04 11:21:34
cvelist
cvelist
CVE-2020-13935
2020-07-14 15:00:21
CVE-2020-14384
2020-09-09 13:17:28
ubuntucve
ubuntucve
CVE-2020-13935
2020-07-14 00:00:00
cve
cve
CVE-2020-13935
2020-07-14 15:15:11
CVE-2020-14384
2020-09-09 14:15:12
github
github
Infinite Loop in Apache Tomcat
2022-02-08 22:05:17
suse
suse
Security update for tomcat (important)
2020-07-29 00:00:00
Security update for tomcat (important)
2020-07-27 00:00:00
debian
debian
[SECURITY] [DLA 2286-1] tomcat8 security update
2020-07-22 16:39:36
[SECURITY] [DSA 4627-1] tomcat9 security update
2020-07-17 18:07:40
photon
photon
Important Photon OS Security Update - PHSA-2020-0116
2020-07-20 00:00:00
Important Photon OS Security Update - PHSA-2020-3.0-0116
2020-07-20 00:00:00
centos
centos
tomcat security update
2020-10-20 19:04:26
cisa
cisa
Apache Releases Security Advisories for Apache Tomcat
2020-07-14 00:00:00
amazon
amazon
Important: tomcat8
2020-07-27 23:58:00
Important: tomcat
2023-05-11 17:49:00
ubuntu
ubuntu
Tomcat vulnerabilities
2020-08-04 00:00:00
Tomcat vulnerabilities
2020-10-21 00:00:00
atlassian
atlassian
Upgrade Tomcat to version 9.0.37
2020-06-29 13:40:00
Upgrade Tomcat to version 9.0.37
2020-06-29 13:40:00
Upgrade the bundled version of Apache Tomcat to 8.5.57
2020-07-17 15:19:11
oraclelinux
oraclelinux
tomcat security and bug fix update
2020-10-06 00:00:00
mageia
mageia
Updated tomcat packages fix security vulnerability
2020-08-18 21:47:25
freebsd
freebsd
Apache Tomcat -- Multiple Vulnerabilities
2020-07-05 00:00:00
symantec
symantec
Apache Tomcat Vulnerabilities May 2020 - Mar 2021
2021-03-16 19:59:07
oracle
oracle
Oracle Critical Patch Update Advisory - January 2021
2021-01-19 00:00:00
Oracle Critical Patch Update Advisory - July 2021
2021-07-20 00:00:00
Oracle Critical Patch Update Advisory - April 2021
2021-04-20 00:00:00