Apache Tomcat Uncontrolled Resource Consumption vulnerability

🗓️ 17 Dec 2024 15:31:43Reported by GitHub Advisory DatabaseType

Uncontrolled Resource Consumption in Apache Tomcat leads to denial of service; upgrade recommended.

Reporter	Title	Published	Views	Family All 133
Tenable Nessus	Amazon Linux 2023 : tomcat9, tomcat9-admin-webapps, tomcat9-el-3.0-api (ALAS2023-2025-813)	24 Jan 202500:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : tomcat10, tomcat10-admin-webapps, tomcat10-el-5.0-api (ALAS2023-2025-814)	24 Jan 202500:00	–	nessus
Tenable Nessus	Amazon Linux 2 : tomcat (ALAS-2025-2829)	17 Apr 202500:00	–	nessus
Tenable Nessus	Amazon Linux 2 : tomcat (ALASTOMCAT9-2025-015)	24 Jan 202500:00	–	nessus
Tenable Nessus	Debian dla-4244 : libtomcat9-embed-java - security update	22 Jul 202500:00	–	nessus
Tenable Nessus	Debian dsa-5845 : libtomcat10-embed-java - security update	17 Jan 202500:00	–	nessus
Tenable Nessus	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-6.10.1.7)	22 Jul 202500:00	–	nessus
Tenable Nessus	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-6.8.1.9)	22 Jul 202500:00	–	nessus
Tenable Nessus	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.0.1.6)	26 Jun 202500:00	–	nessus
Tenable Nessus	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-7.1.1)	26 Aug 202500:00	–	nessus

Vulners

Node

org.apache.tomcat tomcatRange9.0.0.M1–9.0.98maven

org.apache.tomcat tomcatRange10.1.0-M1–10.1.34maven

org.apache.tomcat tomcatRange11.0.0-M1–11.0.2maven

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-54677
lists	www.lists.apache.org/thread/tdtbbxpg5trdwc2wnopcth9ccvdftq2n
github	www.github.com/apache/tomcat/commit/f57a9d9847c1038be61f5818d73b8be907c460d4
github	www.github.com/apache/tomcat/commit/e8c16cdba833884e1bd49fff1f1cb699da177585
github	www.github.com/apache/tomcat/commit/dbec927859d9484cb8bd680a7c67b1a560f48444
github	www.github.com/apache/tomcat/commit/d63a10afc142b12f462a15f7d10f79fd80ff94eb
github	www.github.com/apache/tomcat/commit/cb1707685472994e9d924746f8c91cb116fa5213
github	www.github.com/apache/tomcat/commit/c2f7ce21c3fb12caefee87c517a8bb4f80700044
github	www.github.com/apache/tomcat/commit/c0a23927ea5e061ca3fdff695138464179fe674a
github	www.github.com/apache/tomcat/commit/bbd82e9593314ade4cfd57248f9285fbad686f66

06 Jul 2026 14:12Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.15.3

EPSS0.01952

SSVC