UpHeron
All vulnerabilities

Servers and applications

CVE-2021-43980

The simplified implementation of blocking reads and writes introduced in Tomcat 10 and back-ported to Tomcat 9.0.47 onwards exposed a long standing (but extremely hard to trigger) concurrency bug in Apache Tomcat 10.1.0 to 10.1.0-M12, 10.0.0-M1 to 10.0.18, 9.0.0-M1 to 9.0.60 and 8.5.0 to 8.5.77 that could cause client connections to share an Http11Processor instance resulting in responses, or…

Severity
Low 3.7
Published
28 Sept 2022
Last changed
17 Jun 2026
Added to UpHeron
21 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
Apache TomcatServers and applications · cpe:a:apache:tomcat
  • Version 10.1.0-milestone12
  • Version 10.1.0-milestone11
  • Version 10.1.0-milestone10
  • Version 10.1.0-milestone9
All 15 release lines
  • From 8.5.0 up to 8.5.77
  • From 9.0.0 up to 9.0.60
  • From 10.0.0 up to 10.0.18
  • Version 10.1.0-milestone1
  • Version 10.1.0-milestone2
  • Version 10.1.0-milestone3
  • Version 10.1.0-milestone4
  • Version 10.1.0-milestone5
  • Version 10.1.0-milestone6
  • Version 10.1.0-milestone7
  • Version 10.1.0-milestone8
  • Version 10.1.0-milestone9
  • Version 10.1.0-milestone10
  • Version 10.1.0-milestone11
  • Version 10.1.0-milestone12

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2021-43980
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2021-43980