The host is installed with Apache Tomcat 10.0.0-M1 through 10.0.2, 9.0.0.M1 through 9.0.43 or 8.5.0 through 8.5.63 and is prone to a denial of service vulnerability. A flaw is present in application, which fails to handle a specially crafted packet when tomcat was configured to use NIO+OpenSSL or NIO2+OpenSSL for TLS. Successful exploitation could allow attackers to trigger an infinite loop resulting in a denial of service.