PT-2024-9743
CVE-2024-54677
·
تاريخ النشر
2024-12-09
·
تاريخ التحديث
2026-09-17
الوصف من
CVSS 4.0
6.9
متوسطةالمقاييسAV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions
Apache Tomcat versions 11.0.0-M1 through 11.0.1
Apache Tomcat versions 10.1.0-M1 through 10.1.33
Apache Tomcat versions 9.0.0.M1 through 9.0.97
Description
The issue is related to an uncontrolled resource consumption vulnerability in the examples web application provided with Apache Tomcat, leading to a denial of service. This can be exploited by a remote attacker to cause a service disruption.
Recommendations
For Apache Tomcat versions 11.0.0-M1 through 11.0.1, upgrade to version 11.0.2.
For Apache Tomcat versions 10.1.0-M1 through 10.1.33, upgrade to version 10.1.34.
For Apache Tomcat versions 9.0.0.M1 through 9.0.97, upgrade to version 9.0.98.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾