Поиск уязвимостей
Количество 17
Количество 17
CVE-2025-52434
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Apache Tomcat when using the APR/Native connector. This was particularly noticeable with client initiated closes of HTTP/2 connections. This issue affects Apache Tomcat: from 9.0.0.M1 through 9.0.106. The following versions were EOL at the time the CVE was created but are known to be affected: 8.5.0 through 8.5.100. Other, older, EOL versions may also be affected. Users are recommended to upgrade to version 9.0.107, which fixes the issue.
CVE-2025-52434
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Apache Tomcat when using the APR/Native connector. This was particularly noticeable with client initiated closes of HTTP/2 connections. This issue affects Apache Tomcat: from 9.0.0.M1 through 9.0.106. The following versions were EOL at the time the CVE was created but are known to be affected: 8.5.0 through 8.5.100. Other, older, EOL versions may also be affected. Users are recommended to upgrade to version 9.0.107, which fixes the issue.
CVE-2025-52434
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Apache Tomcat when using the APR/Native connector. This was particularly noticeable with client initiated closes of HTTP/2 connections. This issue affects Apache Tomcat: from 9.0.0.M1 through 9.0.106. The following versions were EOL at the time the CVE was created but are known to be affected: 8.5.0 through 8.5.100. Other, older, EOL versions may also be affected. Users are recommended to upgrade to version 9.0.107, which fixes the issue.
CVE-2025-52434
Concurrent Execution using Shared Resource with Improper Synchronizati ...
GHSA-4j3c-42xv-3f84
Apache Tomcat is vulnerable to resource exhaustion when using the APR/Native connector
BDU:2025-08954
Уязвимость сервера приложений Apache Tomcat, связанная с ошибками синхронизации при использовании общего ресурса («Ситуация гонки»), позволяющая нарушителю вызвать отказ в обслуживании
SUSE-SU-2025:03024-1
Security update for tomcat
ROS-20250826-08
Множественные уязвимости tomcat
RLSA-2025:14181
Important: tomcat security update
RLSA-2025:14178
Important: tomcat9 security update
RLSA-2025:14177
Important: tomcat security update
ELSA-2025-14181
ELSA-2025-14181: tomcat security update (IMPORTANT)
ELSA-2025-14178
ELSA-2025-14178: tomcat9 security update (IMPORTANT)
ELSA-2025-14177
ELSA-2025-14177: tomcat security update (IMPORTANT)
ALT-PU-2025-13135
ALT-PU-2025-13135: package `tomcat` update to version 9.0.98-alt0_1jpp17.p10.6
ALT-PU-2026-4984
ALT-PU-2026-4984: package `tomcat` update to version 9.0.115-alt0.p11.1
SUSE-SU-2026:1058-1
Security update for tomcat
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2025-52434 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Apache Tomcat when using the APR/Native connector. This was particularly noticeable with client initiated closes of HTTP/2 connections. This issue affects Apache Tomcat: from 9.0.0.M1 through 9.0.106. The following versions were EOL at the time the CVE was created but are known to be affected: 8.5.0 through 8.5.100. Other, older, EOL versions may also be affected. Users are recommended to upgrade to version 9.0.107, which fixes the issue. | CVSS3: 7.5 | 2% Низкий | больше 1 года назад |
 | CVE-2025-52434 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Apache Tomcat when using the APR/Native connector. This was particularly noticeable with client initiated closes of HTTP/2 connections. This issue affects Apache Tomcat: from 9.0.0.M1 through 9.0.106. The following versions were EOL at the time the CVE was created but are known to be affected: 8.5.0 through 8.5.100. Other, older, EOL versions may also be affected. Users are recommended to upgrade to version 9.0.107, which fixes the issue. | CVSS3: 5.3 | 2% Низкий | больше 1 года назад |
 | CVE-2025-52434 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Apache Tomcat when using the APR/Native connector. This was particularly noticeable with client initiated closes of HTTP/2 connections. This issue affects Apache Tomcat: from 9.0.0.M1 through 9.0.106. The following versions were EOL at the time the CVE was created but are known to be affected: 8.5.0 through 8.5.100. Other, older, EOL versions may also be affected. Users are recommended to upgrade to version 9.0.107, which fixes the issue. | CVSS3: 7.5 | 2% Низкий | больше 1 года назад |
| CVE-2025-52434 Concurrent Execution using Shared Resource with Improper Synchronizati ... | CVSS3: 7.5 | 2% Низкий | больше 1 года назад |
| GHSA-4j3c-42xv-3f84 Apache Tomcat is vulnerable to resource exhaustion when using the APR/Native connector | CVSS3: 7.5 | 2% Низкий | больше 1 года назад |
 | BDU:2025-08954 Уязвимость сервера приложений Apache Tomcat, связанная с ошибками синхронизации при использовании общего ресурса («Ситуация гонки»), позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 5.6 | 2% Низкий | больше 1 года назад |
 | SUSE-SU-2025:03024-1 Security update for tomcat | около 1 года назад | ||
 | ROS-20250826-08 Множественные уязвимости tomcat | CVSS3: 5.6 | около 1 года назад | |
 | RLSA-2025:14181 Important: tomcat security update | около 1 года назад | ||
| RLSA-2025:14178 Important: tomcat9 security update | около 1 года назад | ||
| RLSA-2025:14177 Important: tomcat security update | около 1 года назад | ||
| ELSA-2025-14181 ELSA-2025-14181: tomcat security update (IMPORTANT) | около 1 года назад | ||
| ELSA-2025-14178 ELSA-2025-14178: tomcat9 security update (IMPORTANT) | около 1 года назад | ||
| ELSA-2025-14177 ELSA-2025-14177: tomcat security update (IMPORTANT) | около 1 года назад | ||
| ALT-PU-2025-13135 ALT-PU-2025-13135: package `tomcat` update to version 9.0.98-alt0_1jpp17.p10.6 | CVSS3: 9.6 | 12 месяцев назад | |
| ALT-PU-2026-4984 ALT-PU-2026-4984: package `tomcat` update to version 9.0.115-alt0.p11.1 | CVSS3: 9.1 | 8 месяцев назад | |
| SUSE-SU-2026:1058-1 Security update for tomcat | 8 месяцев назад |
Уязвимостей на страницу