Поиск уязвимостей
Количество 21
Количество 21
ALT-PU-2022-2165
ALT-PU-2022-2165: package `tomcat` update to version 9.0.59-alt1_3jpp11
ROS-20221103-06
Множественные уязвимости Apache Tomcat
ALT-PU-2022-3296
ALT-PU-2022-3296: package `tomcat` update to version 9.0.59-alt1_3jpp11
CVE-2021-42340
The fix for bug 63362 present in Apache Tomcat 10.1.0-M1 to 10.1.0-M5, 10.0.0-M1 to 10.0.11, 9.0.40 to 9.0.53 and 8.5.60 to 8.5.71 introduced a memory leak. The object introduced to collect metrics for HTTP upgrade connections was not released for WebSocket connections once the connection was closed. This created a memory leak that, over time, could lead to a denial of service via an OutOfMemoryError.
CVE-2021-42340
The fix for bug 63362 present in Apache Tomcat 10.1.0-M1 to 10.1.0-M5, 10.0.0-M1 to 10.0.11, 9.0.40 to 9.0.53 and 8.5.60 to 8.5.71 introduced a memory leak. The object introduced to collect metrics for HTTP upgrade connections was not released for WebSocket connections once the connection was closed. This created a memory leak that, over time, could lead to a denial of service via an OutOfMemoryError.
CVE-2021-42340
The fix for bug 63362 present in Apache Tomcat 10.1.0-M1 to 10.1.0-M5, 10.0.0-M1 to 10.0.11, 9.0.40 to 9.0.53 and 8.5.60 to 8.5.71 introduced a memory leak. The object introduced to collect metrics for HTTP upgrade connections was not released for WebSocket connections once the connection was closed. This created a memory leak that, over time, could lead to a denial of service via an OutOfMemoryError.
CVE-2021-42340
The fix for bug 63362 present in Apache Tomcat 10.1.0-M1 to 10.1.0-M5, ...
CVE-2022-23181
The fix for bug CVE-2020-9484 introduced a time of check, time of use vulnerability into Apache Tomcat 10.1.0-M1 to 10.1.0-M8, 10.0.0-M5 to 10.0.14, 9.0.35 to 9.0.56 and 8.5.55 to 8.5.73 that allowed a local attacker to perform actions with the privileges of the user that the Tomcat process is using. This issue is only exploitable when Tomcat is configured to persist sessions using the FileStore.
CVE-2022-23181
The fix for bug CVE-2020-9484 introduced a time of check, time of use vulnerability into Apache Tomcat 10.1.0-M1 to 10.1.0-M8, 10.0.0-M5 to 10.0.14, 9.0.35 to 9.0.56 and 8.5.55 to 8.5.73 that allowed a local attacker to perform actions with the privileges of the user that the Tomcat process is using. This issue is only exploitable when Tomcat is configured to persist sessions using the FileStore.
CVE-2022-23181
The fix for bug CVE-2020-9484 introduced a time of check, time of use vulnerability into Apache Tomcat 10.1.0-M1 to 10.1.0-M8, 10.0.0-M5 to 10.0.14, 9.0.35 to 9.0.56 and 8.5.55 to 8.5.73 that allowed a local attacker to perform actions with the privileges of the user that the Tomcat process is using. This issue is only exploitable when Tomcat is configured to persist sessions using the FileStore.
CVE-2022-23181
The fix for bug CVE-2020-9484 introduced a time of check, time of use ...
GHSA-wph7-x527-w3h5
Missing Release of Resource after Effective Lifetime in Apache Tomcat
BDU:2021-06115
Уязвимость сервера приложений Apache Tomcat, связанная с утечкой памяти, позволяющая нарушителю вызвать отказ в обслуживании
openSUSE-SU-2022:0818-1
Security update for tomcat
SUSE-SU-2022:0818-1
Security update for tomcat
SUSE-SU-2022:0784-1
Security update for tomcat
SUSE-SU-2022:0695-1
Security update for tomcat
SUSE-SU-2022:0694-1
Security update for tomcat
GHSA-9f3j-pm6f-9fm5
Race condition in Apache Tomcat
BDU:2022-06690
Уязвимость сервера приложений Apache Tomcat, связанная с ошибками синхронизации при использовании общего ресурса, позволяющая нарушителю повысить свои привилегии
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2022-2165 ALT-PU-2022-2165: package `tomcat` update to version 9.0.59-alt1_3jpp11 | CVSS3: 7.5 | больше 4 лет назад | |
 | ROS-20221103-06 Множественные уязвимости Apache Tomcat | CVSS3: 7.5 | около 4 лет назад | |
| ALT-PU-2022-3296 ALT-PU-2022-3296: package `tomcat` update to version 9.0.59-alt1_3jpp11 | CVSS3: 7.5 | почти 4 года назад | |
 | CVE-2021-42340 The fix for bug 63362 present in Apache Tomcat 10.1.0-M1 to 10.1.0-M5, 10.0.0-M1 to 10.0.11, 9.0.40 to 9.0.53 and 8.5.60 to 8.5.71 introduced a memory leak. The object introduced to collect metrics for HTTP upgrade connections was not released for WebSocket connections once the connection was closed. This created a memory leak that, over time, could lead to a denial of service via an OutOfMemoryError. | CVSS3: 7.5 | 12% Средний | около 5 лет назад |
 | CVE-2021-42340 The fix for bug 63362 present in Apache Tomcat 10.1.0-M1 to 10.1.0-M5, 10.0.0-M1 to 10.0.11, 9.0.40 to 9.0.53 and 8.5.60 to 8.5.71 introduced a memory leak. The object introduced to collect metrics for HTTP upgrade connections was not released for WebSocket connections once the connection was closed. This created a memory leak that, over time, could lead to a denial of service via an OutOfMemoryError. | CVSS3: 7.5 | 12% Средний | около 5 лет назад |
 | CVE-2021-42340 The fix for bug 63362 present in Apache Tomcat 10.1.0-M1 to 10.1.0-M5, 10.0.0-M1 to 10.0.11, 9.0.40 to 9.0.53 and 8.5.60 to 8.5.71 introduced a memory leak. The object introduced to collect metrics for HTTP upgrade connections was not released for WebSocket connections once the connection was closed. This created a memory leak that, over time, could lead to a denial of service via an OutOfMemoryError. | CVSS3: 7.5 | 12% Средний | около 5 лет назад |
| CVE-2021-42340 The fix for bug 63362 present in Apache Tomcat 10.1.0-M1 to 10.1.0-M5, ... | CVSS3: 7.5 | 12% Средний | около 5 лет назад |
| CVE-2022-23181 The fix for bug CVE-2020-9484 introduced a time of check, time of use vulnerability into Apache Tomcat 10.1.0-M1 to 10.1.0-M8, 10.0.0-M5 to 10.0.14, 9.0.35 to 9.0.56 and 8.5.55 to 8.5.73 that allowed a local attacker to perform actions with the privileges of the user that the Tomcat process is using. This issue is only exploitable when Tomcat is configured to persist sessions using the FileStore. | CVSS3: 7 | 1% Низкий | почти 5 лет назад |
| CVE-2022-23181 The fix for bug CVE-2020-9484 introduced a time of check, time of use vulnerability into Apache Tomcat 10.1.0-M1 to 10.1.0-M8, 10.0.0-M5 to 10.0.14, 9.0.35 to 9.0.56 and 8.5.55 to 8.5.73 that allowed a local attacker to perform actions with the privileges of the user that the Tomcat process is using. This issue is only exploitable when Tomcat is configured to persist sessions using the FileStore. | CVSS3: 7 | 1% Низкий | почти 5 лет назад |
| CVE-2022-23181 The fix for bug CVE-2020-9484 introduced a time of check, time of use vulnerability into Apache Tomcat 10.1.0-M1 to 10.1.0-M8, 10.0.0-M5 to 10.0.14, 9.0.35 to 9.0.56 and 8.5.55 to 8.5.73 that allowed a local attacker to perform actions with the privileges of the user that the Tomcat process is using. This issue is only exploitable when Tomcat is configured to persist sessions using the FileStore. | CVSS3: 7 | 1% Низкий | почти 5 лет назад |
| CVE-2022-23181 The fix for bug CVE-2020-9484 introduced a time of check, time of use ... | CVSS3: 7 | 1% Низкий | почти 5 лет назад |
| GHSA-wph7-x527-w3h5 Missing Release of Resource after Effective Lifetime in Apache Tomcat | CVSS3: 7.5 | 12% Средний | около 5 лет назад |
 | BDU:2021-06115 Уязвимость сервера приложений Apache Tomcat, связанная с утечкой памяти, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 12% Средний | около 5 лет назад |
 | openSUSE-SU-2022:0818-1 Security update for tomcat | 1% Низкий | больше 4 лет назад | |
| SUSE-SU-2022:0818-1 Security update for tomcat | 1% Низкий | больше 4 лет назад | |
| SUSE-SU-2022:0784-1 Security update for tomcat | 1% Низкий | больше 4 лет назад | |
| SUSE-SU-2022:0695-1 Security update for tomcat | 1% Низкий | больше 4 лет назад | |
| SUSE-SU-2022:0694-1 Security update for tomcat | 1% Низкий | больше 4 лет назад | |
| GHSA-9f3j-pm6f-9fm5 Race condition in Apache Tomcat | CVSS3: 7 | 1% Низкий | почти 5 лет назад |
| BDU:2022-06690 Уязвимость сервера приложений Apache Tomcat, связанная с ошибками синхронизации при использовании общего ресурса, позволяющая нарушителю повысить свои привилегии | CVSS3: 7 | 1% Низкий | почти 5 лет назад |
Уязвимостей на страницу