Staging Environment: Content and features may be unstable or change without notice.
Advisory details: gitlab / maven/org.apache.tomcat/tomcat-websocket/CVE-2020-13935
Advisory ID gitlab/maven/org.apache.tomcat/tomcat-websocket/CVE-2020-13935
Aliases CVE-2020-13935
GHSA-m7jv-hq7h-mq7c
Summary Infinite Loop in Apache Tomcat The payload length in a WebSocket frame was not correctly validated in Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M1 to 9.0.36, 8.5.0 to 8.5.56 and 7.0.27 to 7.0.104. Invalid payload lengths could trigger an infinite loop. Multiple requests with invalid payload lengths could lead to a denial of service.
Status Published
Exploitability 2.0
Weighted Severity 0.0
Risk
Affected and Fixed Packages Package Details
Introduced and Fixed Package Commit Patches Package Commit Patches Details
Weaknesses (3)
CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
cvssv3.1 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-websocket/CVE-2020-13935.yml
Reference id Reference type URL
https://github.com/apache/tomcat/commit/12d715676038efbf9c728af10163f8277fc019d5
https://github.com/apache/tomcat/commit/1c1c77b0efb667cea80b532440b44cea1dc427c3
https://github.com/apache/tomcat/commit/40fa74c74822711ab878079d0a69f7357926723d
https://github.com/apache/tomcat/commit/4c04982870d6e730c38e21e58fb653b7cf723784
https://github.com/apache/tomcat/commit/f9f75c14678b68633f79030ddf4ff827f014cc84
https://kc.mcafee.com/corporate/index?page=content&id=SB10332
https://lists.apache.org/thread.html/r4e5d3c09f4dd2923191e972408b40fb8b42dbff0bc7904d44b651e50@%3Cusers.tomcat.apache.org%3E
https://lists.apache.org/thread.html/r4e5d3c09f4dd2923191e972408b40fb8b42dbff0bc7904d44b651e50%40%3Cusers.tomcat.apache.org%3E
https://lists.apache.org/thread.html/rd48c72bd3255bda87564d4da3791517c074d94f8a701f93b85752651%40%3Cannounce.tomcat.apache.org%3E
https://lists.debian.org/debian-lts-announce/2020/07/msg00017.html
https://security.netapp.com/advisory/ntap-20200724-0003
https://tomcat.apache.org/security-10.html
https://tomcat.apache.org/security-7.html
https://tomcat.apache.org/security-8.html
https://tomcat.apache.org/security-9.html
https://usn.ubuntu.com/4448-1
https://usn.ubuntu.com/4596-1
https://www.debian.org/security/2020/dsa-4727
https://www.oracle.com/security-alerts/cpujan2021.html
https://www.oracle.com//security-alerts/cpujul2021.html
https://www.oracle.com/security-alerts/cpuoct2020.html
cpuApr2021.html Other https://www.oracle.com/security-alerts/cpuApr2021.html
cpuapr2022.html Other https://www.oracle.com/security-alerts/cpuapr2022.html
cpujan2022.html Other https://www.oracle.com/security-alerts/cpujan2022.html
cpuoct2021.html Other https://www.oracle.com/security-alerts/cpuoct2021.html
CVE-2020-13935 https://nvd.nist.gov/vuln/detail/CVE-2020-13935
GHSA-m7jv-hq7h-mq7c https://github.com/advisories/GHSA-m7jv-hq7h-mq7c
No exploits are available.

No EPSS data available for this advisory.

Patch URL
There are no known patches.
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Found at https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.tomcat/tomcat-websocket/CVE-2020-13935.yml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none

There are no SSVC decisions available.