Red Hat Security Advisory: tomcat security update

Fixed packages 8

Vulnerabilities 11

• Critical 10.0
  CVE-2025-24813 Exploited Public exploit Scanner template EPSS 100%

  Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT

  Path Equivalence: 'file.Name' (Internal Dot) leading to Remote Code Execution and/or Information disclosure and/or malicious content added to uploaded files via write enabled Default Servlet in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 t…

  Apache Software Foundation Apache Tomcat thingsboard-tb-node thingsboard-tb-mqtt-transport Debian Ubuntu Wolfi Maven
  Mar 10, 2025

  KEV Apr 1, 2025
• High 7.5
  CVE-2023-44487 Exploited Public exploit EPSS 100%

  HTTP/2 Stream Cancellation Attack

  The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

  nodejs golang go kubescape Debian Ubuntu Azure Linux Alpine Wolfi Maven Go SwiftURL
  Oct 10, 2023

  KEV Oct 10, 2023
• Critical 9.8
  CVE-2024-52316 Public exploit

  Apache Tomcat: Authentication bypass when using Jakarta Authentication API

  Unchecked Error Condition vulnerability in Apache Tomcat. If Tomcat is configured to use a custom Jakarta Authentication (formerly JASPIC) ServerAuthContext component which may throw an exception during the authentication process without explicitly setting an…

  Apache Software Foundation Apache Tomcat tomcat9 tomcat8 Debian Ubuntu Maven
  Nov 18, 2024
• Critical 9.8
  CVE-2024-56337

  Apache Tomcat: RCE due to TOCTOU issue in JSP compilation - CVE-2024-50379 mitigation was incomplete

  Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.1, from 10.1.0-M1 through 10.1.33, from 9.0.0.M1 through 9.0.97. The following versions were EOL at the time the CV…

  Apache Software Foundation Apache Tomcat thingsboard-tb-node thingsboard-tb-mqtt-transport Debian Ubuntu Wolfi Maven
  Dec 20, 2024
• High 7.5
  CVE-2023-46589

  Apache Tomcat: HTTP request smuggling via malformed trailer headers

  Improper Input Validation vulnerability in Apache Tomcat.Tomcat from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.1.15, from 9.0.0-M1 through 9.0.82 and from 8.5.0 through 8.5.95 did not correctly parse HTTP trailer headers. A trailer header that e…

  Apache Software Foundation Apache Tomcat tomcat9 tomcat8 Debian Ubuntu Maven
  Nov 28, 2023
• High 7.5
  CVE-2024-24549 Public exploit EPSS 23%

  Apache Tomcat: HTTP/2 header handling DoS

  Denial of Service due to improper input validation vulnerability for HTTP/2 requests in Apache Tomcat. When processing an HTTP/2 request, if the request exceeded any of the configured limits for headers, the associated HTTP/2 stream was not reset until after …

  Apache Software Foundation Apache Tomcat tomcat9 tomcat8 Debian Ubuntu Maven
  Mar 13, 2024
• Medium 6.3
  CVE-2024-23672

  Apache Tomcat: WebSocket DoS with incomplete closing handshake

  Denial of Service via incomplete cleanup vulnerability in Apache Tomcat. It was possible for WebSocket clients to keep WebSocket connections open leading to increased resource consumption.This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M16, fr…

  Apache Software Foundation Apache Tomcat tomcat9 tomcat8 Debian Ubuntu Maven
  Mar 13, 2024
• Medium 6.1
  CVE-2023-41080 Public exploit

  Apache Tomcat: Open redirect with FORM authentication

  URL Redirection to Untrusted Site ('Open Redirect') vulnerability in FORM authentication feature Apache Tomcat.This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.0.12, from 9.0.0-M1 through 9.0.79 and from 8.5.0 thr…

  Apache Software Foundation Apache Tomcat org.apache.tomcat:tomcat tomcat9 Debian Ubuntu Maven
  Aug 25, 2023
• Medium 5.3
  CVE-2023-42795

  Apache Tomcat: Failure during request clean-up leads to sensitive data leaking to subsequent requests

  Incomplete Cleanup vulnerability in Apache Tomcat.When recycling various internal objects in Apache Tomcat from 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1 through 10.1.13, from 9.0.0-M1 through 9.0.80 and from 8.5.0 through 8.5.93, an error could cause Tomc…

  Apache Software Foundation Apache Tomcat org.apache.tomcat:tomcat tomcat9 Debian Ubuntu Maven
  Oct 10, 2023
• Medium 5.3
  CVE-2023-45648 Scanner template

  Apache Tomcat: Trailer header parsing too lenient

  Improper Input Validation vulnerability in Apache Tomcat.Tomcat from 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1 through 10.1.13, from 9.0.0-M1 through 9.0.81 and from 8.5.0 through 8.5.93 did not correctly parse HTTP trailer headers. A specially crafted, in…

  Apache Software Foundation Apache Tomcat org.apache.tomcat:tomcat tomcat9 Debian Ubuntu Maven
  Oct 10, 2023
• Medium 5.3
  CVE-2024-54677

  Apache Tomcat: DoS in examples web application

  Uncontrolled Resource Consumption vulnerability in the examples web application provided with Apache Tomcat leads to denial of service. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.1, from 10.1.0-M1 through 10.1.33, from 9.0.0.M1 through 9.9.…

  Apache Software Foundation Apache Tomcat org.apache.tomcat:tomcat tomcat9 Debian Ubuntu Maven
  Dec 17, 2024

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2326972
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2332815
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2351129
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_7497.json
• report
  https://access.redhat.com/security/cve/CVE-2023-41080
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2235370
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-41080
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-41080
• article
  https://lists.apache.org/thread/71wvwprtx2j2m54fovq9zr7gbm2wow2f
• report
  https://access.redhat.com/security/cve/CVE-2023-42795
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2243752
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-42795
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-42795
• article
  http://www.openwall.com/lists/oss-security/2023/10/10/9
• article
  https://lists.apache.org/thread/065jfyo583490r9j2v73nhpyxdob56lw
• report
  https://access.redhat.com/security/cve/CVE-2023-44487
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2242803
• article
  https://access.redhat.com/security/vulnerabilities/RHSB-2023-003
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-44487
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-44487
• article
  https://github.com/dotnet/announcements/issues/277
• advisory
  https://pkg.go.dev/vuln/GO-2023-2102
• article
  https://www.cisa.gov/news-events/alerts/2023/10/10/http2-rapid-reset-vulnerability-cve-2023-44487
• article
  https://www.nginx.com/blog/http-2-rapid-reset-attack-impacting-f5-nginx-products/
• article
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog
• report
  https://access.redhat.com/security/cve/CVE-2023-45648
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2243749
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-45648
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-45648
• article
  http://www.openwall.com/lists/oss-security/2023/10/10/10
• article
  https://lists.apache.org/thread/2pv8yz1pyp088tsxfb7ogltk9msk0jdp
• report
  https://access.redhat.com/security/cve/CVE-2023-46589
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2252050
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-46589
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-46589
• article
  http://www.openwall.com/lists/oss-security/2023/11/28/2
• article
  https://lists.apache.org/thread/0rqq6ktozqc42ro8hhxdmmdjm1k1tpxr
• report
  https://access.redhat.com/security/cve/CVE-2024-23672