CVE:CVE-2021-42340
CNNVD:CNNVD-202110-1057
Apache Tomcat是美国阿帕奇（Apache）基金会的一款轻量级Web应用服务器。该程序实现了对Servlet和JavaServer Page（JSP）的支持。
Apache Tomcat存在资源管理错误漏洞，该漏洞源于网络系统或产品在内存上执行操作时，未正确验证数据边界，导致向关联的其他内存位置上执行了错误的读写操作。攻击者可利用该漏洞导致缓冲区溢出或堆溢出等。
solution:Upgrade apache tomcat to a higher version than 8.5.72,9.0.54,10.0.12,10.0.0:milestone10,10.1.0:milestone1,10.1.0:milestone2,10.1.0:milestone3,10.1.0:milestone4,10.1.0:milestone5,and avoid the version [8.5.60,8.5.72),[9.0.40,9.0.54),[10.0.1,10.0.12),10.0.0:milestone10,10.1.0:milestone1,10.1.0:milestone2,10.1.0:milestone3,10.1.0:milestone4,10.1.0:milestone5; Upgrade netapp hci to a higher version than -; Upgrade netapp management_services_for_element_software to a higher version than -; Upgrade debian debian_linux to a higher version than 11.0,and avoid the version 11.0; Upgrade oracle agile_engineering_data_management to a higher version than 6.2.1.0,and avoid the version 6.2.1.0; Upgrade oracle big_data_spatial_and_graph to a higher version than 23.1,and avoid the version (,23.1); Upgrade oracle communications_diameter_signaling_router to a higher version than 8.5.0.2,and avoid the version [8.0.0.0,8.5.0.2]; Upgrade oracle hospitality_cruise_shipboard_property_management_system to a higher version than 20.1.0,and avoid the version 20.1.0; Upgrade oracle managed_file_transfer to a higher version than 12.2.1.3.0,12.2.1.4.0,and avoid the version 12.2.1.3.0,12.2.1.4.0; Upgrade oracle middleware_common_libraries_and_tools to a higher version than 12.2.1.4.0,and avoid the version 12.2.1.4.0; Upgrade oracle payment_interface to a higher version than 19.1,20.3,and avoid the version 19.1,20.3; Upgrade oracle retail_customer_insights to a higher version than 15.0.2,16.0.2,and avoid the version 15.0.2,16.0.2; Upgrade oracle retail_data_extractor_for_merchandising to a higher version than 15.0.2,16.0.2,and avoid the version 15.0.2,16.0.2; Upgrade oracle retail_eftlink to a higher version than 21.0.0,and avoid the version 21.0.0; Upgrade oracle retail_financial_integration to a higher version than 16.0.1,19.0.0,and avoid the version 16.0.1,19.0.0; Upgrade oracle retail_store_inventory_management to a higher version than 14.0.4.13,14.1.3.5,14.1.3.14,15.0.3.3,15.0.3.8,16.0.3.7,and avoid the version 14.0.4.13,14.1.3.5,14.1.3.14,15.0.3.3,15.0.3.8,16.0.3.7; Upgrade oracle sd-wan_edge to a higher version than 9.0,9.1,and avoid the version 9.0,9.1; Upgrade oracle taleo_platform to a higher version than *