Lucene search
Gentoo FoundationGLSA-202208-34HistoryAug 21, 2022 - 12:00 a.m.
Apache Tomcat: Multiple Vulnerabilities
2022-08-2100:00:00
Gentoo Foundation
security.gentoo.org
31
0.123 Low
EPSS
Percentile
95.4%
Background
Apache Tomcat is a Servlet-3.0/JSP-2.2 Container.
Description
Multiple vulnerabilities have been discovered in Apache Tomcat. Please review the CVE identifiers referenced below for details.
Impact
Please review the referenced CVE identifiers for details.
Workaround
There is no known workaround at this time.
Resolution
All Apache Tomcat 10.x users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=www-servers/tomcat-10.0.23:10"
All Apache Tomcat 9.x users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=www-servers/tomcat-9.0.65:9"
All Apache Tomcat 8.5.x users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=www-servers/tomcat-8.5.82:8.5"
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Gentoo | any | all | www-servers/tomcat | < 10.0.23 | UNKNOWN |
Related
nessus
nessus
GLSA-202208-34 : Apache Tomcat: Multiple Vulnerabilities
2022-08-25 00:00:00
Debian DSA-4952-1 : tomcat9 - security update
2021-08-10 00:00:00
Photon OS 2.0: Apache PHSA-2021-2.0-0328
2021-03-16 00:00:00
atlassian
atlassian
Upgrade the bundled version of Apache Tomcat to 8.5.68 or later
2021-07-14 11:35:20
Upgrade the bundled version of Apache Tomcat to 8.5.68 or later
2021-07-14 11:35:20
mageia
mageia
Updated tomcat packages fix security vulnerability
2021-10-23 13:05:28
Updated tomcat packages fix security vulnerabilities
2021-07-20 13:46:47
openvas
openvas
Mageia: Security Advisory (MGASA-2021-0485)
2022-01-28 00:00:00
Debian: Security Advisory (DLA-2733-1)
2021-08-06 00:00:00
Debian: Security Advisory (DSA-4891-1)
2021-04-15 00:00:00
ibm
ibm
photon
photon
Home
Download Photon OS
User Documentation
FAQ
Security Advisories
Related Information
Lightwave - PHSA-2021-1.0-0372
2021-03-18 00:00:00
Important Photon OS Security Update - PHSA-2021-0208
2021-03-17 00:00:00
Important Photon OS Security Update - PHSA-2021-0066
2021-07-21 00:00:00
kaspersky
kaspersky
KLA12104 Multiple vulnerabilities in Apache Tomcat
2021-02-02 00:00:00
KLA12216 DoS vulnerability in Apache Tomcat
2021-04-06 00:00:00
KLA19262 XSS vulnerability in Apache Tomcat
2022-07-26 00:00:00
debian
debian
[SECURITY] [DSA 4891-1] tomcat9 security update
2021-04-13 20:47:05
[SECURITY] [DSA 5009-1] tomcat9 security update
2021-11-12 14:35:56
ubuntu
ubuntu
Tomcat vulnerabilities
2022-03-31 00:00:00
redhat
redhat
(RHSA-2021:4863) Important: Red Hat JBoss Web Server 5.6.0 Security release
2021-11-30 14:21:16
(RHSA-2021:4861) Important: Red Hat JBoss Web Server 5.6.0 Security release
2021-11-30 14:19:46
(RHSA-2021:2562) Moderate: Red Hat JBoss Web Server 5.5.0 security release
2021-06-29 08:35:57
tomcat
tomcat
Fixed in Apache Tomcat 8.5.63
2021-02-02 00:00:00
Fixed in Apache Tomcat 9.0.43
2021-02-02 00:00:00
Fixed in Apache Tomcat 10.0.2
2021-02-02 00:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2023-2258
2023-10-21 16:49:43
f5
f5
K87895241 : Apache Tomcat vulnerability CVE-2021-30639
2021-07-29 00:00:00
K00303143 : Apache Tomcat vulnerability CVE-2022-34305
2022-07-11 00:00:00
K35033051 : Tomcat vulnerability CVE-2021-30640
2021-07-28 00:00:00
osv
osv
Improper Handling of Exceptional Conditions in Apache Tomcat
2021-08-13 15:21:02
BIT-tomcat-2021-30639
2024-03-06 11:10:12
CVE-2021-42340
2021-10-14 20:15:09
cvelist
cvelist
CVE-2021-30639 DoS after non-blocking IO error
2021-07-12 14:55:12
CVE-2022-34305 XSS in examples web application
2022-06-23 10:30:16
CVE-2021-33037 Incorrect Transfer-Encoding handling with HTTP/1.0
2021-07-12 14:55:15
prion
prion
Design/Logic Flaw
2021-07-12 15:15:00
Memory corruption
2021-10-14 20:15:00
cve
cve
debiancve
debiancve
freebsd
freebsd
tomcat -- Remote Denial of Service in multiple versions
2021-03-24 00:00:00
tomcat -- HTTP request smuggling in multiple versions
2021-05-07 00:00:00
tomcat -- JNDI Realm Authentication Weakness in multiple versions
2021-04-08 00:00:00
github
github
Cross-site Scripting in Apache Tomcat
2022-06-24 00:00:32
Missing Release of Resource after Effective Lifetime in Apache Tomcat
2021-10-15 18:51:34
Improper Handling of Exceptional Conditions in Apache Tomcat
2021-08-13 15:21:02
cnvd
cnvd
Apache Tomcat Resource Management Error Vulnerability (CNVD-2021-83785)
2021-10-18 00:00:00
cisa
cisa
Apache Releases Security Advisory for Tomcat
2021-10-15 00:00:00
redhatcve
redhatcve
veracode
veracode
Denial Of Service (DoS)
2021-10-15 08:23:36
Cross-site Scripting (XSS)
2022-06-24 04:07:07
Request Smuggling
2021-07-30 03:29:00
ubuntucve
ubuntucve
amazon
amazon
Medium: tomcat8
2021-09-02 22:54:00