Debian Security Advisory 5522-3

Debian Linux Security Advisory 5522-3 - A regression was discovered in the Http2UpgradeHandler class of Tomcat 9 introduced by the patch to fix CVE-2023-44487 (Rapid Reset Attack). A wrong value for the overheadcount variable forced HTTP2 connections to close early.

advisory attack class connections cve cve-2023-44487 debian fix http2 linux linux security patch rapid rapid reset rapid reset attack reset security security advisory tomcat value variable wrong