Skip to content
OpenAdvisories
Medium DLA-2407-1 1 CVE

tomcat8 - security update

Published Oct 14, 2020 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 9 tomcat8 8.5.54-0+deb9u4

Vulnerabilities 1

  • Medium 4.3
    CVE-2020-13943 EPSS 53%

    Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat

    If an HTTP/2 client connecting to Apache Tomcat 10.0.0-M1 to 10.0.0-M7, 9.0.0.M1 to 9.0.37 or 8.5.0 to 8.5.57 exceeded the agreed maximum number of concurrent streams for a connection (in violation of the HTTP/2 protocol), it was possible that a subsequent re…

    tomcat9 org.apache.tomcat:tomcat-coyote Debian Maven