CVE-2020-11996

apache tomcat, canonical ubuntu linux, oracle mysql enterprise monitor +5 lainnya

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2020-11996

Katalog CVE

CVSS 7.5 · High EPSS 26,7%

Kerentanan pada apache tomcat, canonical ubuntu linux +6 lainnya. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

A specially crafted sequence of HTTP/2 requests sent to Apache Tomcat 10.0.0-M1 to 10.0.0-M5, 9.0.0.M1 to 9.0.35 and 8.5.0 to 8.5.55 could trigger high CPU usage for several seconds. If a sufficient number of such requests were made on concurrent HTTP/2 connections, the server could become unresponsive.

Rincian

Terbit di NVD
26 Juni 2020
Terakhir diubah
8 Oktober 2026
Status NVD
Modified
CVSS 3.1
7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator
EPSS (30 hari)
26,7% peluang dieksploitasi; lebih tinggi dari 97,9% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
apache tomcat Versi 8.5.0 hingga 8.5.55
apache tomcat Versi 9.0.0 hingga 9.0.35
apache tomcat Versi 9.0.0 milestone1
apache tomcat Versi 9.0.0 milestone10
apache tomcat Versi 9.0.0 milestone11
apache tomcat Versi 9.0.0 milestone12
apache tomcat Versi 9.0.0 milestone13
apache tomcat Versi 9.0.0 milestone14
apache tomcat Versi 9.0.0 milestone15
apache tomcat Versi 9.0.0 milestone16
apache tomcat Versi 9.0.0 milestone17
apache tomcat Versi 9.0.0 milestone18
apache tomcat Versi 9.0.0 milestone19
apache tomcat Versi 9.0.0 milestone2
apache tomcat Versi 9.0.0 milestone20
apache tomcat Versi 9.0.0 milestone21
apache tomcat Versi 9.0.0 milestone22
apache tomcat Versi 9.0.0 milestone23
apache tomcat Versi 9.0.0 milestone24
apache tomcat Versi 9.0.0 milestone25
apache tomcat Versi 9.0.0 milestone26
apache tomcat Versi 9.0.0 milestone27
apache tomcat Versi 9.0.0 milestone3
apache tomcat Versi 9.0.0 milestone4
apache tomcat Versi 9.0.0 milestone5
apache tomcat Versi 9.0.0 milestone6
apache tomcat Versi 9.0.0 milestone7
apache tomcat Versi 9.0.0 milestone8
apache tomcat Versi 9.0.0 milestone9
apache tomcat Versi 10.0.0 milestone1
apache tomcat Versi 10.0.0 milestone2
apache tomcat Versi 10.0.0 milestone3
apache tomcat Versi 10.0.0 milestone4
apache tomcat Versi 10.0.0 milestone5
canonical ubuntu linux Versi 20.04
oracle mysql enterprise monitor Semua versi hingga 8.0.21
oracle siebel ui framework Semua versi hingga 20.12
oracle workload manager Versi 12.2.0.1
oracle workload manager Versi 18c
oracle workload manager Versi 19c
opensuse leap Versi 15.1
opensuse leap Versi 15.2
debian debian linux Versi 9.0
debian debian linux Versi 10.0
netapp oncommand system manager Versi 3.0
netapp oncommand system manager Versi 3.1.3

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 9 Okt 2026, 12:28 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.