● CVE — High
CVE-2020-13934
Vendordebian, canonical, opensuse, oracle, apacheProductdebian linux, ubuntu linux, leap, agile product lifecycle management, tomcat, communications instant messaging server, managed file transfer, agile plm, mysql enterprise monitor, oncommand system manager, agile engineering data management, instantis enterprisetrack, siebel ui framework, fmw platform, workload managerDiscoveredJul 14, 2020UpdatedAug 25, 2026
An h2c direct connection to Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M5 to 9.0.36 and 8.5.1 to 8.5.56 did not release the HTTP/1.1 processor after the upgrade to HTTP/2. If a sufficient number of such requests were made, an OutOfMemoryException could occur leading to a denial of service.