Oval Definition:oval:com.ubuntu.xenial:def:2019100720000000
Revision Date:2019-06-21Version:1
Title:CVE-2019-10072 on Ubuntu 16.04 LTS (xenial) - medium.
Description:The fix for CVE-2019-0199 was incomplete and did not address HTTP/2 connection window exhaustion on write in Apache Tomcat versions 9.0.0.M1 to 9.0.19 and 8.5.0 to 8.5.40 . By not sending WINDOW_UPDATE messages for the connection window (stream 0) clients were able to cause server-side threads to block eventually leading to thread exhaustion and a DoS.
Family:unixClass:vulnerability
Status:Reference(s):CVE-2019-10072
Platform(s):Ubuntu 16.04 LTS
Product(s):
Definition Synopsis
  • Ubuntu 16.04 LTS (xenial) is installed.
  • AND tomcat8 package in xenial is affected and may need fixing.
    • BACK