Test Kennung:	1.3.6.1.4.1.25623.1.0.811297
Kategorie:	Web Servers
Titel:	Apache Tomcat 'HTTP2' Denial of Service Vulnerability - Windows
Zusammenfassung:	Apache Tomcat is prone to a denial of service (DoS) vulnerability.
Beschreibung:	Summary: Apache Tomcat is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: The flaw exists due to error in HTTP2 header parser in Apache Tomcat which enters an infinite loop if a header was received that was larger than the available buffer. Vulnerability Impact: Successful exploitation will allow remote attackers to conduct a denial-of-service condition. Affected Software/OS: Apache Tomcat versions 9.0.0.M1 to 9.0.0.M11, Apache Tomcat versions 8.5.0 to 8.5.6 on Windows. Solution: Upgrade to Apache Tomcat version 9.0.0.M13 or 8.5.8 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2016-6817 BugTraq ID: 94462 http://www.securityfocus.com/bid/94462 https://lists.apache.org/thread.html/a9f24571460af003071475b75f18cad81ebcc36fa7c876965a75e32a@%3Cannounce.tomcat.apache.org%3E https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551@%3Cdev.tomcat.apache.org%3E https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc@%3Cdev.tomcat.apache.org%3E https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a@%3Cdev.tomcat.apache.org%3E https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3@%3Cdev.tomcat.apache.org%3E http://www.securitytracker.com/id/1037330
Copyright	Copyright (C) 2017 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.