Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4j3c-42xv-3f84

Опубликовано: 10 июл. 2025
Источник: github
Github: Прошло ревью
CVSS4: 6.3
CVSS3: 7.5

Описание

Apache Tomcat Utilities is vulnerable to resource exhaustion when using the APR/Native connector

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Apache Tomcat when using the APR/Native connector. This was particularly noticeable with client initiated closes of HTTP/2 connections.

This issue affects Apache Tomcat: from 9.0.0.M1 through 9.0.106.

Users are recommended to upgrade to version 9.0.107, which fixes the issue.

Пакеты

Наименование

org.apache.tomcat:tomcat-util

maven
Затронутые версииВерсия исправления

>= 9.0.0.M1, < 9.0.107

9.0.107

EPSS

Процентиль: 24%
0.00078
Низкий

6.3 Medium

CVSS4

7.5 High

CVSS3

Дефекты

CWE-362

Связанные уязвимости

CVSS3: 7.5
ubuntu
23 дня назад

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Apache Tomcat when using the APR/Native connector. This was particularly noticeable with client initiated closes of HTTP/2 connections. This issue affects Apache Tomcat: from 9.0.0.M1 through 9.0.106. Users are recommended to upgrade to version 9.0.107, which fixes the issue.

CVSS3: 5.3
redhat
23 дня назад

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Apache Tomcat when using the APR/Native connector. This was particularly noticeable with client initiated closes of HTTP/2 connections. This issue affects Apache Tomcat: from 9.0.0.M1 through 9.0.106. Users are recommended to upgrade to version 9.0.107, which fixes the issue.

CVSS3: 7.5
nvd
23 дня назад

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Apache Tomcat when using the APR/Native connector. This was particularly noticeable with client initiated closes of HTTP/2 connections. This issue affects Apache Tomcat: from 9.0.0.M1 through 9.0.106. Users are recommended to upgrade to version 9.0.107, which fixes the issue.

CVSS3: 7.5
debian
23 дня назад

Concurrent Execution using Shared Resource with Improper Synchronizati ...

CVSS3: 5.6
fstec
24 дня назад

Уязвимость сервера приложений Apache Tomcat, связанная с ошибками синхронизации при использовании общего ресурса («Ситуация гонки»), позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 24%
0.00078
Низкий

6.3 Medium

CVSS4

7.5 High

CVSS3

Дефекты

CWE-362