CVE-2021-43980
1 advisory.
Maven/org.apache.tomcat:tomcat CVE-2021-43980: low 3.7
Apache Tomcat Race Condition vulnerability
Action: Upgrade org.apache.tomcat:tomcat to 8.5.78 (8.5.x), 9.0.62 (9.0.x), 10.0.20 (10.0.x) or 10.1.0-M14 (10.1.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 8.5.0 | 8.5.78 | - |
| 9.0.0-M1 | 9.0.62 | - |
| 10.0.0-M1 | 10.0.20 | - |
| 10.1.0-M1 | 10.1.0-M14 | - |
Fixed versions
| 8.5.78 | 9.0.62 | 10.0.20 | 10.1.0-M14 |
Sources
- osv: GHSA-jx7c-7mj5-9438
- https://nvd.nist.gov/vuln/detail/CVE-2021-43980
- https://github.com/apache/tomcat/commit/170e0f792bd18ff031677890ba2fe50eb7a376c1
- https://github.com/apache/tomcat/commit/17f177eeb7df5938f67ef9ea580411b120195f13
- https://github.com/apache/tomcat/commit/4a00b0c0890538b9d3107eef8f2e0afadd119beb
- https://github.com/apache/tomcat/commit/9651b83a1d04583791525e5f0c4c9089f678d9fc
- https://github.com/apache/tomcat
- https://lists.apache.org/thread/3jjqbsp6j88b198x5rmg99b1qr8ht3g3
- https://lists.debian.org/debian-lts-announce/2022/10/msg00029.html
- https://tomcat.apache.org/security-10.html
- https://tomcat.apache.org/security-8.html
- https://tomcat.apache.org/security-9.html
- https://www.debian.org/security/2022/dsa-5265
- http://www.openwall.com/lists/oss-security/2022/09/28/1
CVE-2021-43980 · published · modified · JSON