Summary
Denial of Service due to improper input validation vulnerability for HTTP/2 requests in Apache Tomcat. When processing an HTTP/2 request, if the request exceeded any of the configured limits for headers, the associated HTTP/2 stream was not reset until after all of the headers had been processed.
Products Potentially Affected
| OS/Product |
Exposure |
| ExtremeAnalytics for Site Engine |
No |
| ExtremeCloud IQ - Site Engine (XIQ-SE) |
No |
| ExtremeControl for Site Engine |
No |
Repair Recommendations
None.
Please see the full security advisory article here for more details and updates.
