Intrusion PreventionApache.Tomcat.HTTP2.DoS
Description
This indicates an attack attempt to exploit a Denial of Service Vulnerability in Apache Software Foundation Tomcat.
A remote, unauthenticated attacker can exploit this vulnerability by sending a large number of requests on several separate HTTP/2 connections with an initial window size of 0. Successful exploitation results in denial of service conditions on the target server.
Affected Products
Apache Software Foundation Tomcat 8.5.0 to 8.5.37
Apache Software Foundation Tomcat 9.0.0.M1 to 9.0.14
Impact
Denial of Service: Remote attackers can crash vulnerable systems.
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.38
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2022-08-02 | 21.366 | Modified |
| 2019-06-14 | 14.633 | Default_action:pass:drop |
| 2019-04-26 | 14.602 |
| ID | 47781 |
| Created | Apr 26, 2019 |
| Updated | Jul 28, 2022 |
| Risk |
|
| CVE ID | CVE-2019-0199 |
| Exploit Prediction Score | 72.67% |
| Default Action | drop |
| Active | |
| Affected OS | Windows, Linux |
| Affected App | Apache |