Summary
It was discovered that Apache Tomcat incorrectly implemented partial
PUT functionality by replacing path separators with dots in temporary
files. A remote attacker could possibly use this issue to access
sensitive files, inject malicious content, or execute remote code.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | tomcat9 | 9.0.16-3ubuntu0.18.04.2+esm6 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | tomcat9 | 9.0.31-1ubuntu0.9+esm1 |
| Ubuntu · Pro 22.04 LTS Pro:22.04:LTS | tomcat9 | 9.0.58-1ubuntu0.2+esm2 |
| Ubuntu · Pro 24.04 LTS Pro:24.04:LTS | tomcat10 | 10.1.16-1ubuntu0.1~esm1 |
Vulnerabilities 1
-
Critical 10.0
Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT
Path Equivalence: 'file.Name' (Internal Dot) leading to Remote Code Execution and/or Information disclosure and/or malicious content added to uploaded files via write enabled Default Servlet in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 t…
KEV Apr 1, 2025
References
-
report
https://ubuntu.com/security/CVE-2025-24813