Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2025-48988

Опубликовано: 16 июн. 2025
Источник: ubuntu
Приоритет: medium
EPSS Средний
CVSS3: 7.5

Описание

Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.7, from 10.1.0-M1 through 10.1.41, from 9.0.0.M1 through 9.0.105. The following versions were EOL at the time the CVE was created but are known to be affected: 8.5.0 though 8.5.100. Other, older, EOL versions may also be affected. Users are recommended to upgrade to version 11.0.8, 10.1.42 or 9.0.106, which fix the issue.

РелизСтатусПримечание
devel

needed

esm-apps/noble

needed

esm-apps/resolute

needed

jammy

DNE

noble

needed

oracular

ignored

end of life, was needs-triage
plucky

ignored

end of life, was needed
questing

ignored

end of life, was needed
resolute

needed

upstream

released

10.1.42

Показывать по

РелизСтатусПримечание
devel

not-affected

11.0.18-1
esm-apps/resolute

needed

jammy

DNE

noble

DNE

oracular

DNE

plucky

DNE

questing

ignored

end of life, was needed
resolute

needed

upstream

released

11.0.8

Показывать по

РелизСтатусПримечание
bionic

DNE

devel

DNE

esm-apps-legacy/xenial

not-affected

see notes
esm-apps/xenial

ignored

end of ESM support, was needs-triage
esm-infra-legacy/trusty

needed

esm-infra/focal

DNE

focal

DNE

jammy

DNE

noble

DNE

questing

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

DNE

esm-apps-legacy/xenial

needed

esm-apps/bionic

not-affected

see notes
esm-apps/xenial

ignored

end of ESM support, was needs-triage
esm-infra-legacy/trusty

needed

esm-infra/focal

DNE

focal

DNE

jammy

DNE

noble

DNE

Показывать по

РелизСтатусПримечание
bionic

ignored

end of standard support
devel

DNE

esm-apps/bionic

needed

esm-infra-legacy/trusty

DNE

esm-infra-legacy/xenial

needed

esm-infra/focal

DNE

esm-infra/xenial

ignored

end of ESM support, was needs-triage
focal

DNE

jammy

DNE

noble

DNE

Показывать по

РелизСтатусПримечание
devel

not-affected

esm-apps/bionic

needed

esm-apps/focal

needed

esm-apps/jammy

needed

esm-apps/noble

not-affected

esm-apps/resolute

not-affected

jammy

needed

noble

not-affected

9.0.70-2ubuntu0.1
oracular

not-affected

plucky

not-affected

Показывать по

EPSS

Процентиль: 99%
0.56286
Средний

7.5 High

CVSS3

Связанные уязвимости

CVSS3: 5.3
redhat
около 1 года назад

Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.7, from 10.1.0-M1 through 10.1.41, from 9.0.0.M1 through 9.0.105. The following versions were EOL at the time the CVE was created but are known to be affected: 8.5.0 though 8.5.100. Other, older, EOL versions may also be affected. Users are recommended to upgrade to version 11.0.8, 10.1.42 or 9.0.106, which fix the issue.

CVSS3: 7.5
nvd
около 1 года назад

Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.7, from 10.1.0-M1 through 10.1.41, from 9.0.0.M1 through 9.0.105. The following versions were EOL at the time the CVE was created but are known to be affected: 8.5.0 though 8.5.100. Other, older, EOL versions may also be affected. Users are recommended to upgrade to version 11.0.8, 10.1.42 or 9.0.106, which fix the issue.

CVSS3: 7.5
debian
около 1 года назад

Allocation of Resources Without Limits or Throttling vulnerability in ...

CVSS3: 7.5
github
около 1 года назад

Apache Tomcat - DoS in multipart upload

CVSS3: 7.5
redos
около 1 года назад

Уязвимость tomcat

EPSS

Процентиль: 99%
0.56286
Средний

7.5 High

CVSS3