USN-4596-1: Tomcat vulnerabilities
21 October 2020
Several security issues were fixed in Tomcat.
Releases
Packages
- tomcat9 - Apache Tomcat 9 - Servlet and JSP engine
Details
It was discovered that Tomcat did not properly manage HTTP/2 streams. An
attacker could possibly use this to cause Tomcat to consume resources,
resulting in a denial of service. (CVE-2020-11996)
It was discovered that Tomcat did not properly release the HTTP/1.1
processor after the upgrade to HTTP/2. An attacker could possibly use this
to generate an OutOfMemoryException, resulting in a denial of service.
(CVE-2020-13934)
It was discovered that Tomcat did not properly validate the payload length
in a WebSocket frame. An attacker could possibly use this to trigger an
infinite loop, resulting in a denial of service. (CVE-2020-13935)
It was discovered that Tomcat did not properly deserialize untrusted data.
An attacker could possibly use this issue to execute arbitrary code.
(CVE-2020-9484)
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 20.04
-
libtomcat9-embed-java
-
9.0.31-1ubuntu0.1
-
libtomcat9-java
-
9.0.31-1ubuntu0.1
-
tomcat9
-
9.0.31-1ubuntu0.1
-
tomcat9-common
-
9.0.31-1ubuntu0.1
In general, a standard system update will make all the necessary changes.
References
Related notices
- USN-4448-1: tomcat8, libservlet3.1-java-doc, libservlet3.1-java, tomcat8-examples, libtomcat8-java, tomcat8-admin, tomcat8-user, tomcat8-docs, tomcat8-common
- USN-5360-1: libtomcat9-java, tomcat9-user, tomcat9, tomcat9-docs, libtomcat9-embed-java, tomcat9-common, tomcat9-examples, tomcat9-admin
- USN-6908-1: libservlet3.0-java-doc, tomcat7-common, tomcat7-admin, libservlet3.0-java, tomcat7-docs, tomcat7-examples, tomcat7-user, libtomcat7-java, tomcat7
- USN-6943-1: tomcat8, libtomcat9-java, libservlet3.1-java-doc, tomcat9-user, tomcat9, libservlet3.1-java, libtomcat9-embed-java, tomcat8-examples, tomcat9-docs, tomcat9-common, tomcat9-examples, tomcat9-admin, libtomcat8-java, tomcat8-admin, tomcat8-user, libtomcat8-embed-java, tomcat8-docs, tomcat8-common