https://bugzilla.redhat.com/show_bug.cgi?id=1441230
Bug ID: 1441230
Summary: CVE-2017-5650 tomcat: Handling of HTTP/2 GOAWAY frame
for a connection did not close streams associated with
that connection
Product: Security Response
Component: vulnerability
Keywords: Security
Severity: high
Priority: high
Assignee: security-response-team(a)redhat.com
Reporter: amaris(a)redhat.com
CC: alee(a)redhat.com, bbaranow(a)redhat.com,
bmaxwell(a)redhat.com, cdewolf(a)redhat.com,
csutherl(a)redhat.com, dandread(a)redhat.com,
darran.lofthouse(a)redhat.com, dosoudil(a)redhat.com,
gzaronik(a)redhat.com, hhorak(a)redhat.com,
ivan.afonichev(a)gmail.com,
java-sig-commits(a)lists.fedoraproject.org,
jawilson(a)redhat.com, jclere(a)redhat.com,
jdoyle(a)redhat.com, jorton(a)redhat.com,
krzysztof.daniel(a)gmail.com, lgao(a)redhat.com,
mbabacek(a)redhat.com, me(a)coolsvap.net,
mizdebsk(a)redhat.com, myarboro(a)redhat.com,
pgier(a)redhat.com, psakar(a)redhat.com,
pslavice(a)redhat.com, psotirop(a)redhat.com,
rnetuka(a)redhat.com, rsvoboda(a)redhat.com,
trick(a)vanstaveren.us, twalsh(a)redhat.com,
vtunka(a)redhat.com, weli(a)redhat.com
The handling of an HTTP/2 GOAWAY frame for a connection did not close streams
associated with that connection that were currently waiting for a WINDOW_UPDATE
before allowing the application to write more data. These waiting streams each
consumed a thread. A malicious client could therefore construct a series of
HTTP/2 requests that would consume all available processing threads.
Affected versions: 8.5.0 to 8.5.12
Upstream fix:
https://svn.apache.org/viewvc?view=revision&revision=1788480
Reference:
https://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.13
--
You are receiving this mail because:
You are on the CC list for the bug.