Description
A specially crafted sequence of HTTP/2 requests sent to Apache Tomcat 10.0.0-M1 to 10.0.0-M5, 9.0.0.M1 to 9.0.35 and 8.5.0 to 8.5.55 could trigger high CPU usage for several seconds. If a sufficient number of such requests were made on concurrent HTTP/2 connections, the server could become unresponsive.
Remediation
References
Related Vulnerabilities
Sqlite NULL Pointer Dereference Vulnerability (CVE-2019-19923)
WordPress Plugin Max Mega Menu Cross-Site Scripting (2.3.8)
MySQL CVE-2016-0546 Vulnerability (CVE-2016-0546)
WordPress Plugin Adaptive Images for WordPress Multiple Vulnerabilities (0.6.66)
Apache read beyond bounds via ap_rwrite() Vulnerability (CVE-2022-28614)