Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | tomcat | 1:9.0.87-1.el8_8.2 |
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | tomcat-admin-webapps | 1:9.0.87-1.el8_8.2 |
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | tomcat-docs-webapp | 1:9.0.87-1.el8_8.2 |
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | tomcat-el-3.0-api | 1:9.0.87-1.el8_8.2 |
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | tomcat-jsp-2.3-api | 1:9.0.87-1.el8_8.2 |
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | tomcat-lib | 1:9.0.87-1.el8_8.2 |
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | tomcat-servlet-4.0-api | 1:9.0.87-1.el8_8.2 |
| Red Hat · RHEL 8.8 EUS rhel_eus:8.8::appstream | tomcat-webapps | 1:9.0.87-1.el8_8.2 |
Vulnerabilities 8
-
High 7.5
Apache Tomcat: JsonErrorReportValve escaping
The JsonErrorReportValve in Apache Tomcat 8.5.83, 9.0.40 to 9.0.68 and 10.1.0-M1 to 10.1.1 did not escape the type, message or description values. In some circumstances these are constructed from user provided data and it was therefore possible for users to s…
-
High 7.5
Apache Commons FileUpload, Apache Tomcat: FileUpload DoS with excessive parts
Apache Commons FileUpload before 1.5 does not limit the number of request parts to be processed resulting in the possibility of an attacker triggering a DoS with a malicious upload or series of uploads. Note that, like all of the file upload limits, the new c…
-
High 7.5
Apache Tomcat: HTTP/2 header handling DoS
Denial of Service due to improper input validation vulnerability for HTTP/2 requests in Apache Tomcat. When processing an HTTP/2 request, if the request exceeded any of the configured limits for headers, the associated HTTP/2 stream was not reset until after …
-
Medium 6.3
Apache Tomcat: WebSocket DoS with incomplete closing handshake
Denial of Service via incomplete cleanup vulnerability in Apache Tomcat. It was possible for WebSocket clients to keep WebSocket connections open leading to increased resource consumption.This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M16, fr…
-
Medium 6.1CVE-2023-41080 Public exploit
Apache Tomcat: Open redirect with FORM authentication
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FORM authentication feature Apache Tomcat.This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.0.12, from 9.0.0-M1 through 9.0.79 and from 8.5.0 thr…
-
Medium 5.3
Apache Tomcat: Failure during request clean-up leads to sensitive data leaking to subsequent requests
Incomplete Cleanup vulnerability in Apache Tomcat.When recycling various internal objects in Apache Tomcat from 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1 through 10.1.13, from 9.0.0-M1 through 9.0.80 and from 8.5.0 through 8.5.93, an error could cause Tomc…
-
Medium 5.3CVE-2023-45648 Scanner template
Apache Tomcat: Trailer header parsing too lenient
Improper Input Validation vulnerability in Apache Tomcat.Tomcat from 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1 through 10.1.13, from 9.0.0-M1 through 9.0.81 and from 8.5.0 through 8.5.93 did not correctly parse HTTP trailer headers. A specially crafted, in…
-
Medium 4.3
Apache Tomcat: JSESSIONID Cookie missing secure attribute in some configurations
When using the RemoteIpFilter with requests received from a reverse proxy via HTTP that include the X-Forwarded-Proto header set to https, session cookies created by Apache Tomcat 11.0.0-M1 to 11.0.0.-M2, 10.1.0-M1 to 10.1.5, 9.0.0-M1 to 9.0.71 and 8.5.0 to 8…
References
-
article
https://access.redhat.com/security/updates/classification/#important
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2269607
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2269608
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3814.json
-
report
https://access.redhat.com/security/cve/CVE-2022-45143
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2158695
-
advisory
https://www.cve.org/CVERecord?id=CVE-2022-45143
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-45143
-
article
https://lists.apache.org/thread/yqkd183xrw3wqvnpcg3osbcryq85fkzj
-
report
https://access.redhat.com/security/cve/CVE-2023-24998
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2172298
-
advisory
https://www.cve.org/CVERecord?id=CVE-2023-24998
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-24998
-
article
https://commons.apache.org/proper/commons-fileupload/security-reports.html#Fixed_in_Apache_Commons_FileUpload_1.5
-
report
https://access.redhat.com/security/cve/CVE-2023-28708
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2180856
-
advisory
https://www.cve.org/CVERecord?id=CVE-2023-28708
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-28708
-
article
https://bz.apache.org/bugzilla/show_bug.cgi?id=66471
-
article
https://lists.apache.org/thread/hdksc59z3s7tm39x0pp33mtwdrt8qr67
-
report
https://access.redhat.com/security/cve/CVE-2023-41080
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2235370
-
advisory
https://www.cve.org/CVERecord?id=CVE-2023-41080
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-41080
-
article
https://lists.apache.org/thread/71wvwprtx2j2m54fovq9zr7gbm2wow2f
-
report
https://access.redhat.com/security/cve/CVE-2023-42795
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2243752
-
advisory
https://www.cve.org/CVERecord?id=CVE-2023-42795
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-42795
-
article
http://www.openwall.com/lists/oss-security/2023/10/10/9
-
article
https://lists.apache.org/thread/065jfyo583490r9j2v73nhpyxdob56lw
-
report
https://access.redhat.com/security/cve/CVE-2023-45648
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=2243749
-
advisory
https://www.cve.org/CVERecord?id=CVE-2023-45648
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2023-45648
-
article
http://www.openwall.com/lists/oss-security/2023/10/10/10
-
article
https://lists.apache.org/thread/2pv8yz1pyp088tsxfb7ogltk9msk0jdp
-
report
https://access.redhat.com/security/cve/CVE-2024-23672
-
advisory
https://www.cve.org/CVERecord?id=CVE-2024-23672