Логотип exploitDog
bind:CVE-2024-24549
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2024-24549

Количество 14

Количество 14

ubuntu логотип

CVE-2024-24549

больше 1 года назад

Denial of Service due to improper input validation vulnerability for HTTP/2 requests in Apache Tomcat. When processing an HTTP/2 request, if the request exceeded any of the configured limits for headers, the associated HTTP/2 stream was not reset until after all of the headers had been processed.This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M16, from 10.1.0-M1 through 10.1.18, from 9.0.0-M1 through 9.0.85, from 8.5.0 through 8.5.98. Users are recommended to upgrade to version 11.0.0-M17, 10.1.19, 9.0.86 or 8.5.99 which fix the issue.

CVSS3: 7.5
EPSS: Средний
redhat логотип

CVE-2024-24549

больше 1 года назад

Denial of Service due to improper input validation vulnerability for HTTP/2 requests in Apache Tomcat. When processing an HTTP/2 request, if the request exceeded any of the configured limits for headers, the associated HTTP/2 stream was not reset until after all of the headers had been processed.This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M16, from 10.1.0-M1 through 10.1.18, from 9.0.0-M1 through 9.0.85, from 8.5.0 through 8.5.98. Users are recommended to upgrade to version 11.0.0-M17, 10.1.19, 9.0.86 or 8.5.99 which fix the issue.

CVSS3: 7.5
EPSS: Средний
nvd логотип

CVE-2024-24549

больше 1 года назад

Denial of Service due to improper input validation vulnerability for HTTP/2 requests in Apache Tomcat. When processing an HTTP/2 request, if the request exceeded any of the configured limits for headers, the associated HTTP/2 stream was not reset until after all of the headers had been processed.This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M16, from 10.1.0-M1 through 10.1.18, from 9.0.0-M1 through 9.0.85, from 8.5.0 through 8.5.98. Users are recommended to upgrade to version 11.0.0-M17, 10.1.19, 9.0.86 or 8.5.99 which fix the issue.

CVSS3: 7.5
EPSS: Средний
debian логотип

CVE-2024-24549

больше 1 года назад

Denial of Service due to improper input validation vulnerability for H ...

CVSS3: 7.5
EPSS: Средний
github логотип

GHSA-7w75-32cg-r6g2

больше 1 года назад

Apache Tomcat Denial of Service due to improper input validation vulnerability for HTTP/2 requests

CVSS3: 7.5
EPSS: Средний
fstec логотип

BDU:2024-02608

больше 1 года назад

Уязвимость сервера приложений Apache Tomcat, связанная с недостаточной проверкой вводимых данных, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 7.5
EPSS: Средний
suse-cvrf логотип

SUSE-SU-2024:1345-1

около 1 года назад

Security update for tomcat

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2024:1205-1

около 1 года назад

Security update for tomcat

EPSS: Низкий
suse-cvrf логотип

SUSE-SU-2024:1204-1

около 1 года назад

Security update for tomcat10

EPSS: Низкий
redos логотип

ROS-20240703-12

12 месяцев назад

Уязвимость tomcat

CVSS3: 7.5
EPSS: Средний
rocky логотип

RLSA-2024:3666

около 1 года назад

Important: tomcat security and bug fix update

EPSS: Низкий
rocky логотип

RLSA-2024:3307

около 1 года назад

Important: tomcat security and bug fix update

EPSS: Низкий
oracle-oval логотип

ELSA-2024-3666

около 1 года назад

ELSA-2024-3666: tomcat security and bug fix update (IMPORTANT)

EPSS: Низкий
oracle-oval логотип

ELSA-2024-3307

около 1 года назад

ELSA-2024-3307: tomcat security and bug fix update (IMPORTANT)

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2024-24549

Denial of Service due to improper input validation vulnerability for HTTP/2 requests in Apache Tomcat. When processing an HTTP/2 request, if the request exceeded any of the configured limits for headers, the associated HTTP/2 stream was not reset until after all of the headers had been processed.This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M16, from 10.1.0-M1 through 10.1.18, from 9.0.0-M1 through 9.0.85, from 8.5.0 through 8.5.98. Users are recommended to upgrade to version 11.0.0-M17, 10.1.19, 9.0.86 or 8.5.99 which fix the issue.

CVSS3: 7.5
55%
Средний
больше 1 года назад
redhat логотип
CVE-2024-24549

Denial of Service due to improper input validation vulnerability for HTTP/2 requests in Apache Tomcat. When processing an HTTP/2 request, if the request exceeded any of the configured limits for headers, the associated HTTP/2 stream was not reset until after all of the headers had been processed.This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M16, from 10.1.0-M1 through 10.1.18, from 9.0.0-M1 through 9.0.85, from 8.5.0 through 8.5.98. Users are recommended to upgrade to version 11.0.0-M17, 10.1.19, 9.0.86 or 8.5.99 which fix the issue.

CVSS3: 7.5
55%
Средний
больше 1 года назад
nvd логотип
CVE-2024-24549

Denial of Service due to improper input validation vulnerability for HTTP/2 requests in Apache Tomcat. When processing an HTTP/2 request, if the request exceeded any of the configured limits for headers, the associated HTTP/2 stream was not reset until after all of the headers had been processed.This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M16, from 10.1.0-M1 through 10.1.18, from 9.0.0-M1 through 9.0.85, from 8.5.0 through 8.5.98. Users are recommended to upgrade to version 11.0.0-M17, 10.1.19, 9.0.86 or 8.5.99 which fix the issue.

CVSS3: 7.5
55%
Средний
больше 1 года назад
debian логотип
CVE-2024-24549

Denial of Service due to improper input validation vulnerability for H ...

CVSS3: 7.5
55%
Средний
больше 1 года назад
github логотип
GHSA-7w75-32cg-r6g2

Apache Tomcat Denial of Service due to improper input validation vulnerability for HTTP/2 requests

CVSS3: 7.5
55%
Средний
больше 1 года назад
fstec логотип
BDU:2024-02608

Уязвимость сервера приложений Apache Tomcat, связанная с недостаточной проверкой вводимых данных, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 7.5
55%
Средний
больше 1 года назад
suse-cvrf логотип
SUSE-SU-2024:1345-1

Security update for tomcat

около 1 года назад
suse-cvrf логотип
SUSE-SU-2024:1205-1

Security update for tomcat

около 1 года назад
suse-cvrf логотип
SUSE-SU-2024:1204-1

Security update for tomcat10

около 1 года назад
redos логотип
ROS-20240703-12

Уязвимость tomcat

CVSS3: 7.5
55%
Средний
12 месяцев назад
rocky логотип
RLSA-2024:3666

Important: tomcat security and bug fix update

около 1 года назад
rocky логотип
RLSA-2024:3307

Important: tomcat security and bug fix update

около 1 года назад
oracle-oval логотип
ELSA-2024-3666

ELSA-2024-3666: tomcat security and bug fix update (IMPORTANT)

около 1 года назад
oracle-oval логотип
ELSA-2024-3307

ELSA-2024-3307: tomcat security and bug fix update (IMPORTANT)

около 1 года назад

Уязвимостей на страницу