TCP: Apache Tomcat WebSocket Infinite Loop DOS
This signature detects attempts to exploit a known vulnerability against Apache Tomcat WebSocket. A successful attack can result in a denial-of-service condition.
References
CVE: CVE-2020-13935
URL: https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.37
Short Name
TCP:C2S:APACHE-CVE-2020-13935
Severity
Minor
Recommended
False
Recommended Action
Drop
Category
TCP
Keywords
Apache CVE-2020-13935 DOS Infinite Loop Tomcat WebSocket
Release Date
04/16/2026
Supported Platforms
srx-branch-19.3
vsrx3bsd-19.2
srx-19.4
vsrx3bsd-19.4
srx-branch-19.4
vsrx-19.4
srxevo-25.4
vsrx-26.2
srx-26.2
srx-branch-26.2
vsrx3bsd-26.2
vsrx-19.2
srx-19.3
Sigpack Version
3900
False Positive
Unknown