Not rated
CVE-2020-1935 In Apache Tomcat 9.0.0.M1 to 9.0.30, 8.5.0 to 8.5.50 and 7.0.0 to 7.0.99 the HTTP header parsing code used an approach…
Description
In Apache Tomcat 9.0.0.M1 to 9.0.30, 8.5.0 to 8.5.50 and 7.0.0 to 7.0.99 the HTTP header parsing code used an approach to end-of-line parsing that allowed some invalid HTTP headers to be parsed as valid. This led to a possibility of HTTP Request Smuggling if Tomcat was located behind a reverse proxy that incorrectly handled the invalid Transfer-Encoding header in a particular manner. Such a reverse proxy is considered unlikely.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Apache Tomcat | Versions not published |
References
- [tomcat-announce] 20200224 [SECURITY] CVE-2020-1935 HTTP Request Smuggling lists.apache.org
- [debian-lts-announce] 20200304 [SECURITY] [DLA 2133-1] tomcat7 security update lists.debian.org
- openSUSE-SU-2020:0345 lists.opensuse.org
- [tomee-commits] 20200320 [jira] [Created] (TOMEE-2790) TomEE plus(7.0.7) is affected by CVE-2020-1935 & CVE-2019-17569 vulnerabilities lists.apache.org
- [tomee-commits] 20200323 [jira] [Commented] (TOMEE-2790) TomEE plus(7.0.7) is affected by CVE-2020-1935 & CVE-2019-17569 vulnerabilities lists.apache.org
- DSA-4673 www.debian.org
- DSA-4680 www.debian.org
- [debian-lts-announce] 20200528 [SECURITY] [DLA 2209-1] tomcat8 security update lists.debian.org
- www.oracle.com www.oracle.com
- security.netapp.com security.netapp.com
- [tomcat-users] 20200724 CVE-2020-1935 lists.apache.org
- [tomcat-users] 20200724 Re: CVE-2020-1935 lists.apache.org
- [tomcat-users] 20200724 RE: CVE-2020-1935 lists.apache.org
- [tomcat-users] 20200726 Re: CVE-2020-1935 lists.apache.org
- [tomcat-users] 20200727 RE: CVE-2020-1935 lists.apache.org
- USN-4448-1 usn.ubuntu.com
- www.oracle.com www.oracle.com
- www.oracle.com www.oracle.com
- [tomcat-dev] 20210428 [Bug 65272] Problems proccessing HTTP request without CR in last versions lists.apache.org
Timeline
- Published
- Last modified
Other CVEs of Apache Tomcat
The 5 CVEs of Apache Tomcat →
CVE-2020-11996
A specially crafted sequence of HTTP/2 requests sent to Apache Tomcat 10.0.0-M1 to 10.0.0-M5, 9.0.0.M1 to 9.0.35 and…
Not rated
CVE-2020-1938
Apache Tomcat Improper Privilege Management Vulnerability
9.8
Critical
CVE-2019-17569
The refactoring present in Apache Tomcat 9.0.28 to 9.0.30, 8.5.48 to 8.5.50 and 7.0.98 to 7.0.99 introduced a regression
Not rated
CVE-2019-0221
The SSI printenv command in Apache Tomcat 9.0.0.M1 to 9.0.0.17, 8.5.0 to 8.5.39 and 7.0.0 to 7.0.93 echoes user provided…
Not rated