Description
Improper Input Validation vulnerability in Apache Tomcat. Incorrect error handling for some invalid HTTP priority headers resulted in incomplete clean-up of the failed request which created a memory leak. A large number of such requests could trigger an OutOfMemoryException resulting in a denial of service. This issue affects Apache Tomcat: from 9.0.76 through 9.0.102, from 10.1.10 through 10.1.39, from 11.0.0-M2 through 11.0.5. Users are recommended to upgrade to version 9.0.104, 10.1.40 or 11.0.6 which fix the issue.
Remediation
References
Related Vulnerabilities
WordPress Plugin WooCommerce-Store Toolkit Privilege Escalation (1.5.7)
WordPress Plugin InBoundio Marketing Arbitrary File Upload (2.0.3)
SharePoint Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2019-1202)
WebERP Files or Directories Accessible to External Parties Vulnerability (CVE-2020-37082)
WordPress Plugin Payment Gateways Caller for WP e-Commerce Local File Inclusion (0.1)