All vulnerabilities

Servers and applications

CVE-2021-30639

A vulnerability in Apache Tomcat allows an attacker to remotely trigger a denial of service. An error introduced as part of a change to improve error handling during non-blocking I/O meant that the error flag associated with the Request object was not reset between requests. This meant that once a non-blocking I/O error occurred, all future requests handled by that request object would fail.…

Severity
High 7.5
Published
12 Jul 2021
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
Apache TomcatServers and applications · cpe:a:apache:tomcat
  • Version 8.5.64
  • Version 9.0.44
  • Version 10.0.3
  • Version 10.0.4

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2021-30639
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2021-30639