CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-42340

The fix for bug 63362 present in Apache Tomcat 10.1.0-M1 to 10.1.0-M5, 10.0.0-M1 to 10.0.11, 9.0.40 to 9.0.53 and 8.5.60 to 8.5.71 introduced a memory leak. The object introduced to collect metrics for HTTP upgrade connections was not released for WebSocket connections once the connection was closed. This created a memory leak that, over time, could lead to a denial of service via an OutOfMemoryError.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.023

EPSS Ranking 84.1%

CVSS Severity

CVSS v3 Score 7.5

CVSS v2 Score 5.0

References

Products affected by CVE-2021-42340

Apache » Tomcat » Version: 10.0.0

cpe:2.3:a:apache:tomcat:10.0.0
Apache » Tomcat » Version: 10.0.1

cpe:2.3:a:apache:tomcat:10.0.1
Apache » Tomcat » Version: 10.0.10

cpe:2.3:a:apache:tomcat:10.0.10
Apache » Tomcat » Version: 10.0.11

cpe:2.3:a:apache:tomcat:10.0.11
Apache » Tomcat » Version: 10.0.2

cpe:2.3:a:apache:tomcat:10.0.2
Apache » Tomcat » Version: 10.0.3

cpe:2.3:a:apache:tomcat:10.0.3
Apache » Tomcat » Version: 10.0.4

cpe:2.3:a:apache:tomcat:10.0.4
Apache » Tomcat » Version: 10.0.5

cpe:2.3:a:apache:tomcat:10.0.5
Apache » Tomcat » Version: 10.0.6

cpe:2.3:a:apache:tomcat:10.0.6
Apache » Tomcat » Version: 10.0.7

cpe:2.3:a:apache:tomcat:10.0.7
Apache » Tomcat » Version: 10.0.8

cpe:2.3:a:apache:tomcat:10.0.8
Apache » Tomcat » Version: 10.0.9

cpe:2.3:a:apache:tomcat:10.0.9
Apache » Tomcat » Version: 10.1.0

cpe:2.3:a:apache:tomcat:10.1.0
Apache » Tomcat » Version: 8.5.60

cpe:2.3:a:apache:tomcat:8.5.60
Apache » Tomcat » Version: 8.5.61

cpe:2.3:a:apache:tomcat:8.5.61
Apache » Tomcat » Version: 8.5.62

cpe:2.3:a:apache:tomcat:8.5.62
Apache » Tomcat » Version: 8.5.63

cpe:2.3:a:apache:tomcat:8.5.63
Apache » Tomcat » Version: 8.5.64

cpe:2.3:a:apache:tomcat:8.5.64
Apache » Tomcat » Version: 8.5.65

cpe:2.3:a:apache:tomcat:8.5.65
Apache » Tomcat » Version: 8.5.66

cpe:2.3:a:apache:tomcat:8.5.66
Apache » Tomcat » Version: 8.5.67

cpe:2.3:a:apache:tomcat:8.5.67
Apache » Tomcat » Version: 8.5.68

cpe:2.3:a:apache:tomcat:8.5.68
Apache » Tomcat » Version: 8.5.69

cpe:2.3:a:apache:tomcat:8.5.69
Apache » Tomcat » Version: 8.5.70

cpe:2.3:a:apache:tomcat:8.5.70
Apache » Tomcat » Version: 8.5.71

cpe:2.3:a:apache:tomcat:8.5.71
Apache » Tomcat » Version: 9.0.40

cpe:2.3:a:apache:tomcat:9.0.40
Apache » Tomcat » Version: 9.0.41

cpe:2.3:a:apache:tomcat:9.0.41
Apache » Tomcat » Version: 9.0.42

cpe:2.3:a:apache:tomcat:9.0.42
Apache » Tomcat » Version: 9.0.43

cpe:2.3:a:apache:tomcat:9.0.43
Apache » Tomcat » Version: 9.0.44

cpe:2.3:a:apache:tomcat:9.0.44
Apache » Tomcat » Version: 9.0.45

cpe:2.3:a:apache:tomcat:9.0.45
Apache » Tomcat » Version: 9.0.46

cpe:2.3:a:apache:tomcat:9.0.46
Apache » Tomcat » Version: 9.0.47

cpe:2.3:a:apache:tomcat:9.0.47
Apache » Tomcat » Version: 9.0.48

cpe:2.3:a:apache:tomcat:9.0.48
Apache » Tomcat » Version: 9.0.49

cpe:2.3:a:apache:tomcat:9.0.49
Apache » Tomcat » Version: 9.0.50

cpe:2.3:a:apache:tomcat:9.0.50
Apache » Tomcat » Version: 9.0.51

cpe:2.3:a:apache:tomcat:9.0.51
Apache » Tomcat » Version: 9.0.52

cpe:2.3:a:apache:tomcat:9.0.52
Apache » Tomcat » Version: 9.0.53

cpe:2.3:a:apache:tomcat:9.0.53
Netapp » Hci » Version: N/A

cpe:2.3:a:netapp:hci:-
Netapp » Management Services For Element Software » Version: N/A

cpe:2.3:a:netapp:management_services_for_element_software:-
Oracle » Agile Engineering Data Management » Version: 6.2.1.0

cpe:2.3:a:oracle:agile_engineering_data_management:6.2.1.0
Oracle » Big Data Spatial And Graph » Version: N/A

cpe:2.3:a:oracle:big_data_spatial_and_graph:-
Oracle » Big Data Spatial And Graph » Version: 2.0

cpe:2.3:a:oracle:big_data_spatial_and_graph:2.0
Oracle » Communications Diameter Signaling Router » Version: 8.0.0.0

cpe:2.3:a:oracle:communications_diameter_signaling_router:8.0.0.0
Oracle » Communications Diameter Signaling Router » Version: 8.1

cpe:2.3:a:oracle:communications_diameter_signaling_router:8.1
Oracle » Communications Diameter Signaling Router » Version: 8.2

cpe:2.3:a:oracle:communications_diameter_signaling_router:8.2
Oracle » Communications Diameter Signaling Router » Version: 8.2.1

cpe:2.3:a:oracle:communications_diameter_signaling_router:8.2.1
Oracle » Communications Diameter Signaling Router » Version: 8.2.2

cpe:2.3:a:oracle:communications_diameter_signaling_router:8.2.2
Oracle » Communications Diameter Signaling Router » Version: 8.3

cpe:2.3:a:oracle:communications_diameter_signaling_router:8.3
Oracle » Communications Diameter Signaling Router » Version: 8.3.0.0

cpe:2.3:a:oracle:communications_diameter_signaling_router:8.3.0.0
Oracle » Communications Diameter Signaling Router » Version: 8.4

cpe:2.3:a:oracle:communications_diameter_signaling_router:8.4
Oracle » Communications Diameter Signaling Router » Version: 8.4.0.0

cpe:2.3:a:oracle:communications_diameter_signaling_router:8.4.0.0
Oracle » Communications Diameter Signaling Router » Version: 8.4.0.5

cpe:2.3:a:oracle:communications_diameter_signaling_router:8.4.0.5
Oracle » Communications Diameter Signaling Router » Version: 8.5.0

cpe:2.3:a:oracle:communications_diameter_signaling_router:8.5.0
Oracle » Communications Diameter Signaling Router » Version: 8.5.0.2

cpe:2.3:a:oracle:communications_diameter_signaling_router:8.5.0.2
Oracle » Hospitality Cruise Shipboard Property Management System » Version: 20.1.0

cpe:2.3:a:oracle:hospitality_cruise_shipboard_property_management_system:20.1.0
Oracle » Managed File Transfer » Version: 12.2.1.3.0

cpe:2.3:a:oracle:managed_file_transfer:12.2.1.3.0
Oracle » Managed File Transfer » Version: 12.2.1.4.0

cpe:2.3:a:oracle:managed_file_transfer:12.2.1.4.0
Oracle » Middleware Common Libraries And Tools » Version: 12.2.1.4.0

cpe:2.3:a:oracle:middleware_common_libraries_and_tools:12.2.1.4.0
Oracle » Payment Interface » Version: 19.1

cpe:2.3:a:oracle:payment_interface:19.1
Oracle » Payment Interface » Version: 20.3

cpe:2.3:a:oracle:payment_interface:20.3
Oracle » Retail Customer Insights » Version: 15.0.2

cpe:2.3:a:oracle:retail_customer_insights:15.0.2
Oracle » Retail Customer Insights » Version: 16.0.2

cpe:2.3:a:oracle:retail_customer_insights:16.0.2
Oracle » Retail Data Extractor For Merchandising » Version: 15.0.2

cpe:2.3:a:oracle:retail_data_extractor_for_merchandising:15.0.2
Oracle » Retail Data Extractor For Merchandising » Version: 16.0.2

cpe:2.3:a:oracle:retail_data_extractor_for_merchandising:16.0.2
Oracle » Retail Eftlink » Version: 21.0.0

cpe:2.3:a:oracle:retail_eftlink:21.0.0
Oracle » Retail Financial Integration » Version: 16.0.1

cpe:2.3:a:oracle:retail_financial_integration:16.0.1
Oracle » Retail Financial Integration » Version: 19.0.0

cpe:2.3:a:oracle:retail_financial_integration:19.0.0
Oracle » Retail Store Inventory Management » Version: 14.0.4.13

cpe:2.3:a:oracle:retail_store_inventory_management:14.0.4.13
Oracle » Retail Store Inventory Management » Version: 14.1.3.14

cpe:2.3:a:oracle:retail_store_inventory_management:14.1.3.14
Oracle » Retail Store Inventory Management » Version: 14.1.3.5

cpe:2.3:a:oracle:retail_store_inventory_management:14.1.3.5
Oracle » Retail Store Inventory Management » Version: 15.0.3.3

cpe:2.3:a:oracle:retail_store_inventory_management:15.0.3.3
Oracle » Retail Store Inventory Management » Version: 15.0.3.8

cpe:2.3:a:oracle:retail_store_inventory_management:15.0.3.8
Oracle » Retail Store Inventory Management » Version: 16.0.3.7

cpe:2.3:a:oracle:retail_store_inventory_management:16.0.3.7
Oracle » Sd-Wan Edge » Version: 9.0

cpe:2.3:a:oracle:sd-wan_edge:9.0
Oracle » Sd-Wan Edge » Version: 9.1

cpe:2.3:a:oracle:sd-wan_edge:9.1
Oracle » Taleo Platform » Version: N/A

cpe:2.3:a:oracle:taleo_platform:-
Oracle » Taleo Platform » Version: 22.1

cpe:2.3:a:oracle:taleo_platform:22.1
Debian » Debian Linux » Version: 11.0

cpe:2.3:o:debian:debian_linux:11.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-42340

Products

Pricing

Contact Us