Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2024-46544HistorySep 23, 2024 - 11:15 a.m.
CVE-2024-46544
2024-09-2311:15:10
Debian Security Bug Tracker
security-tracker.debian.org
1
apache tomcat connector
vulnerability
incorrect default permissions
unix
Incorrect Default Permissions vulnerability in Apache Tomcat Connectors allows local users to view and modify shared memory containing mod_jk configuration which may lead to information disclosure and/or denial of service. This issue affects Apache Tomcat Connectors: from 1.2.9-beta through 1.2.49. Only mod_jk on Unix like systems is affected. Neither the ISAPI redirector nor mod_jk on Windows is affected. Users are recommended to upgrade to version 1.2.50, which fixes the issue.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | libapache-mod-jk | <= 1:1.2.48-2+deb12u1 | libapache-mod-jk_1:1.2.48-2+deb12u1_all.deb |
| Debian | 11 | all | libapache-mod-jk | <= 1:1.2.48-1+deb11u1 | libapache-mod-jk_1:1.2.48-1+deb11u1_all.deb |
| Debian | 999 | all | libapache-mod-jk | <= 1:1.2.49-1 | libapache-mod-jk_1:1.2.49-1_all.deb |
| Debian | 13 | all | libapache-mod-jk | <= 1:1.2.49-1 | libapache-mod-jk_1:1.2.49-1_all.deb |
Related
redhatcve
redhatcve
CVE-2024-46544
2024-09-23 13:12:19
vulnrichment
vulnrichment
openvas
openvas
Mageia: Security Advisory (MGASA-2024-0315)
2024-09-27 00:00:00
tomcat
tomcat
Fixed in Apache Tomcat JK Connector 1.2.50
2024-09-11 00:00:00
cvelist
cvelist
osv
osv
CVE-2024-46544
2024-09-23 11:15:10
UBUNTU-CVE-2024-46544
2024-09-23 11:15:00
mageia
mageia
Updated apache-mod_jk packages fix security vulnerability
2024-09-27 04:30:52
nvd
nvd
CVE-2024-46544
2024-09-23 11:15:10
cve
cve
CVE-2024-46544
2024-09-23 11:15:10