Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2024:2539-1

Опубликовано: 16 июл. 2024
Источник: suse-cvrf

Описание

Security update for tomcat

This update for tomcat fixes the following issues:

  • CVE-2024-34750: Fixed improper handling of exceptional conditions (bsc#1227399)

Список пакетов

SUSE Linux Enterprise Server 12 SP5
tomcat-9.0.36-3.127.1
tomcat-admin-webapps-9.0.36-3.127.1
tomcat-docs-webapp-9.0.36-3.127.1
tomcat-el-3_0-api-9.0.36-3.127.1
tomcat-javadoc-9.0.36-3.127.1
tomcat-jsp-2_3-api-9.0.36-3.127.1
tomcat-lib-9.0.36-3.127.1
tomcat-servlet-4_0-api-9.0.36-3.127.1
tomcat-webapps-9.0.36-3.127.1
SUSE Linux Enterprise Server for SAP Applications 12 SP5
tomcat-9.0.36-3.127.1
tomcat-admin-webapps-9.0.36-3.127.1
tomcat-docs-webapp-9.0.36-3.127.1
tomcat-el-3_0-api-9.0.36-3.127.1
tomcat-javadoc-9.0.36-3.127.1
tomcat-jsp-2_3-api-9.0.36-3.127.1
tomcat-lib-9.0.36-3.127.1
tomcat-servlet-4_0-api-9.0.36-3.127.1
tomcat-webapps-9.0.36-3.127.1

Ссылки

Описание

Improper Handling of Exceptional Conditions, Uncontrolled Resource Consumption vulnerability in Apache Tomcat. When processing an HTTP/2 stream, Tomcat did not handle some cases of excessive HTTP headers correctly. This led to a miscounting of active HTTP/2 streams which in turn led to the use of an incorrect infinite timeout which allowed connections to remain open which should have been closed. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M20, from 10.1.0-M1 through 10.1.24, from 9.0.0-M1 through 9.0.89. The following versions were EOL at the time the CVE was created but are known to be affected: 8.5.0 though 8.5.100. Other EOL versions may also be affected. Users are recommended to upgrade to version 11.0.0-M21, 10.1.25 or 9.0.90, which fixes the issue.

Затронутые продукты
SUSE Linux Enterprise Server 12 SP5:tomcat-9.0.36-3.127.1
SUSE Linux Enterprise Server 12 SP5:tomcat-admin-webapps-9.0.36-3.127.1
SUSE Linux Enterprise Server 12 SP5:tomcat-docs-webapp-9.0.36-3.127.1
SUSE Linux Enterprise Server 12 SP5:tomcat-el-3_0-api-9.0.36-3.127.1
Ссылки