● CVE — High
CVE-2021-42340
Vendordebian, oracle, apache, netappProductdebian linux, hospitality cruise shipboard property management system, tomcat, communications diameter signaling router, managed file transfer, hci, retail customer insights, agile engineering data management, sd-wan edge, retail store inventory management, retail financial integration, big data spatial and graph, retail eftlink, middleware common libraries and tools, management services for element software, payment interface, retail data extractor for merchandising, taleo platformDiscoveredOct 14, 2021UpdatedNov 21, 2024
The fix for bug 63362 present in Apache Tomcat 10.1.0-M1 to 10.1.0-M5, 10.0.0-M1 to 10.0.11, 9.0.40 to 9.0.53 and 8.5.60 to 8.5.71 introduced a memory leak. The object introduced to collect metrics for HTTP upgrade connections was not released for WebSocket connections once the connection was closed. This created a memory leak that, over time, could lead to a denial of service via an OutOfMemoryError.