UBUNTU-CVE-2020-17527

    Dashboard / Vulnerabilities / UBUNTU-CVE-2020-17527

    UBUNTU-CVE-2020-17527

    Published: 3 Dec 2020Last Modified: 15 Jul 2026
    Upstream:
    CVE-2020-17527
    Aliases:
    USN-5360-1

    Summary:

    Details: While investigating bug 64830 it was discovered that Apache Tomcat 10.0.0-M1 to 10.0.0-M9, 9.0.0-M1 to 9.0.39 and 8.5.0 to 8.5.59 could re-use an HTTP request header value from the previous stream received on an HTTP/2 connection for the request associated with the subsequent stream. While this would most likely lead to an error and the closure of the HTTP/2 connection, it is possible that information could leak between requests.

    References: https://ubuntu.com/security/CVE-2020-17527, https://github.com/apache/tomcat/commit/d56293f816d6dc9e2b47107f208fa9e95db58c65, https://github.com/apache/tomcat/commit/21e3408671aac7e0d7e264e720cac8b1b189eb29, http://www.openwall.com/lists/oss-security/2020/12/03/3, https://lists.apache.org/thread.html/r8a227ac6a755a6406c1cc47dd48800e973d4cf13fe7fe68ac59c679c@%3Cdev.tomcat.apache.org%3E, https://lists.apache.org/thread.html/raa0e9ad388c1e6fd1e301b5e080f9439f64cb4178119a86a4801cc53@%3Cdev.tomcat.apache.org%3E, https://lists.apache.org/thread.html/rce5ac9a40173651d540babce59f6f3825f12c6d4e886ba00823b11e5%40%3Cannounce.tomcat.apache.org%3E, https://lists.apache.org/thread.html/rce5ac9a40173651d540babce59f6f3825f12c6d4e886ba00823b11e5@%3Cannounce.apache.org%3E, https://lists.apache.org/thread.html/rce5ac9a40173651d540babce59f6f3825f12c6d4e886ba00823b11e5@%3Cannounce.tomcat.apache.org%3E, https://lists.apache.org/thread.html/rd5babd13d7a350b369b2f647b4dd32ce678af42f9aba5389df1ae6ca@%3Cusers.tomcat.apache.org%3E, https://ubuntu.com/security/notices/USN-5360-1, https://www.cve.org/CVERecord?id=CVE-2020-17527

    Affected packages

    Package

    Name: tomcat9

    Purl: pkg:deb/ubuntu/tomcat9?arch=source&distro=bionic

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -9.0.16-3ubuntu0.18.04.2

    Affected versions

    9.0.16-3~18.04.1
    9.0.16-3ubuntu0.18.04.1

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    UBUNTU-CVE-2020-17527 | CVE-DB