exploitDog

CVE-2026-41284

Опубликовано: 12 мая 2026

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat.

This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M1 through 9.0.117. Older, unsupported versions may also be affected.

Users are recommended to upgrade to version [FIXED_VERSION], which fixes the issue.

Ссылки

https://lists.apache.org/thread/2nvqjr7ovjmvx2vbhb7s61ycd5msc8qc
Mailing List
Vendor Advisory
http://www.openwall.com/lists/oss-security/2026/05/12/12
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*

Версия от 4.0.0 (включая) до 7.0.109 (включая)

cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*

Версия от 8.5.0 (включая) до 8.5.100 (включая)

cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*

Версия от 9.0.0 (включая) до 9.0.118 (исключая)

cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*

Версия от 10.0.0 (включая) до 10.0.27 (включая)

cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*

Версия от 10.1.0 (включая) до 10.1.55 (исключая)

cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*

Версия от 11.0.0 (включая) до 11.0.22 (исключая)

EPSS

Процентиль: 56%

0.00839

Низкий

7.5 High

CVSS3

Дефекты

CWE-770

Связанные уязвимости

CVE-2026-41284

CVSS3: 7.5

ubuntu

4 месяца назад

Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M1 through 9.0.117. Older, unsupported versions may also be affected. Users are recommended to upgrade to version [FIXED_VERSION], which fixes the issue.

CVE-2026-41284

CVSS3: 7.5

redhat

4 месяца назад

Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M1 through 9.0.117. Older, unsupported versions may also be affected. Users are recommended to upgrade to version [FIXED_VERSION], which fixes the issue.

CVE-2026-41284

CVSS3: 7.5

debian

4 месяца назад

Allocation of Resources Without Limits or Throttling vulnerability in ...

ROS-20260605-80-0036

CVSS3: 7.5

redos

3 месяца назад

Уязвимость tomcat11

ROS-20260605-80-0035

CVSS3: 7.5

redos

3 месяца назад

Уязвимость tomcat10

EPSS

Процентиль: 56%

0.00839

Низкий

7.5 High

CVSS3

Дефекты

CWE-770