VDB
BDU%3A2020-04938
BDU%3A2020-04938
PUBLISHED
CVSS 7.800000190734863 HIGH
Уязвимость сервера приложений Apache Tomcat, связанная с выполнением цикла с недоступным условием выхода, позволяющая нарушителю вызвать отказ в обслуживании
Risk Scores
CVSS 2.0
7.800000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat Inc., Canonical Ltd., Сообщество свободного программного обеспечения, Oracle Corp., Novell Inc., Apache Software Foundation, Cisco Systems Inc., АО «Концерн ВНИИНС» | Red Hat Enterprise Linux, Ubuntu, Debian GNU/Linux, Database, Managed File Transfer, Oracle Retail Order Broker, Agile Engineering Data Management, OpenSUSE Leap, JBoss Enterprise Application Platform, Jboss Fuse, Jboss Web Server, OpenShift Application Runtimes, Red Hat OpenStack Platform, Tomcat, Hyperion Infrastructure Technology, Siebel UI Framework, ОС ОН «Стрелец» (запись в едином реестре российских программ №6177) |
Timeline
- Nov 2, 2020 CVE Published
- Nov 21, 2023 CVE Updated
- Mar 19, 2026 Distribution Patch
- Mar 19, 2026 Security Advisory
- Mar 19, 2026 Security Advisory
- Mar 19, 2026 Security Advisory
References
- https://lists.apache.org/thread.html/rd48c72bd3255bda87564d4da3791517c074d94f8a701f93b85752651%40%3Cannounce.tomcat.apache.org%3E url
- https://www.oracle.com/security-alerts/cpuoct2020.html url
- https://access.redhat.com/security/cve/cve-2020-13935 url
- https://security-tracker.debian.org/tracker/CVE-2020-13935 url
- https://lists.debian.org/debian-lts-announce/2020/07/msg00017.html url
- https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00084.html url
- https://lists.opensuse.org/opensuse-security-announce/2020-07/msg00088.html url
- https://ubuntu.com/security/notices/USN-4448-1 url
- https://www.cybersecurity-help.cz/vdb/SB2020102104 url
- https://www.oracle.com/security-alerts/cpujan2021.html url
- https://strelets.net/patchi-i-obnovleniya-bezopasnosti#16012023 url