High 1 exploited CVE USN-7410-1 1 CVE

tomcat9 vulnerability

Published Apr 7, 2025 · Updated Apr 27, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Tomcat incorrectly handled request cancellation. A
remote attacker could possibly use this issue to cause tomcat9 to consume
resources, leading to a denial of service.

Fixed packages 3

Release	Package	Fixed in
Ubuntu · 20.04 LTS 20.04:LTS	tomcat9	9.0.31-1ubuntu0.9
Ubuntu · 22.04 LTS 22.04:LTS	tomcat9	9.0.58-1ubuntu0.2
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS	tomcat9	9.0.16-3ubuntu0.18.04.2+esm5

Vulnerabilities 1

High 7.5

CVE-2023-44487 Exploited Public exploit EPSS 100%

HTTP/2 Stream Cancellation Attack

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

nodejs golang go kubescape Debian Ubuntu Azure Linux Alpine Wolfi Maven Go SwiftURL

Oct 10, 2023
KEV Oct 10, 2023

References

report
https://ubuntu.com/security/CVE-2023-44487