Intrusion Prevention

Apache.Tomcat.HTTP2.Connection.Window.Exhaustion.DoS

Description

This indicates an attack attempt to exploit a Denial of Service vulnerability in Apache Tomcat.
A remote, unauthenticated attacker can exploit this vulnerability by sending a large number of requests and not sending any WINDOW_UPDATE frames with a Stream ID of 0. Successful exploitation results in denial of service conditions on the target server.

Affected Products

Apache Software Foundation Tomcat 8.x prior to 8.5.41
Apache Software Foundation Tomcat 9.x prior to 9.0.20

Impact

Denial of Service: Remote attackers can crash vulnerable systems.

Recommended Actions

Apply the most recent upgrade or patch from the vendor.
https://tomcat.apache.org/security-8.html#Fixed_in_Apache_Tomcat_8.5.41

CVE References

CVE-2019-10072