subject:"\[SECURITY\] CVE\-2021\-25122 Apache Tomcat h2c request mix\-up"

Re: [SECURITY] CVE-2021-25122 Apache Tomcat h2c request mix-up

2021-03-05 Thread r00t 4dm

riginal Message- >> From: Mark Thomas >> Sent: maanantai 1. maaliskuuta 2021 13.05 >> To: Tomcat Users List >> Cc: annou...@tomcat.apache.org; annou...@apache.org; Tomcat Developers List >> >> Subject: [SECURITY] CVE-2021-25122 Apache Tomcat h2c

Re: [SECURITY] CVE-2021-25122 Apache Tomcat h2c request mix-up

2021-03-05 Thread Mark Thomas

Regards, Teemu Kursu -Original Message- From: Mark Thomas Sent: maanantai 1. maaliskuuta 2021 13.05 To: Tomcat Users List Cc: annou...@tomcat.apache.org; annou...@apache.org; Tomcat Developers List Subject: [SECURITY] CVE-2021-25122 Apache Tomcat h2c request mix-up CVE-2021-25122 h2c

RE: [SECURITY] CVE-2021-25122 Apache Tomcat h2c request mix-up

2021-03-05 Thread Kursu, Teemu

Sent: maanantai 1. maaliskuuta 2021 13.05 To: Tomcat Users List Cc: annou...@tomcat.apache.org; annou...@apache.org; Tomcat Developers List Subject: [SECURITY] CVE-2021-25122 Apache Tomcat h2c request mix-up CVE-2021-25122 h2c request mix-up Severity: Important Vendor: The Apache Software

[SECURITY] CVE-2021-25122 Apache Tomcat h2c request mix-up

2021-03-01 Thread Mark Thomas

CVE-2021-25122 h2c request mix-up Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache Tomcat 10.0.0-M1 to 10.0.0 Apache Tomcat 9.0.0.M1 to 9.0.41 Apache Tomcat 8.5.0 to 8.5.61 Description: When responding to new h2c connection requests, Apache Tomcat could dup