Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
githubGitHub Advisory DatabaseGHSA-V682-8VV8-VPWR
HistoryMar 13, 2024 - 6:31 p.m.

Denial of Service via incomplete cleanup vulnerability in Apache Tomcat

2024-03-1318:31:34
CWE-459
GitHub Advisory Database
github.com
20
denial of service
vulnerability
apache tomcat
websocket
resource consumption
upgrade
software

AI Score

7.2

Confidence

High

EPSS

0

Percentile

10.4%

JSON

Denial of Service via incomplete cleanup vulnerability in Apache Tomcat. It was possible for WebSocket clients to keep WebSocket connections open leading to increased resource consumption.This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M16, from 10.1.0-M1 through 10.1.18, from 9.0.0-M1 through 9.0.85, from 8.5.0 through 8.5.98.

Users are recommended to upgrade to version 11.0.0-M17, 10.1.19, 9.0.86 or 8.5.99 which fix the issue.

Affected configurations

Vulners
Node
org.apache.tomcat.embedtomcat-embed-websocketRange8.5.0–8.5.98
OR
org.apache.tomcat.embedtomcat-embed-websocketRange9.0.0-M1–9.0.85
OR
org.apache.tomcat.embedtomcat-embed-websocketRange10.1.0-M1–10.1.18
OR
org.apache.tomcat.embedtomcat-embed-websocketRange11.0.0-M1–11.0.0-M16
OR
org.apache.tomcattomcat-websocketRange8.5.0–8.5.98
OR
org.apache.tomcattomcat-websocketRange9.0.0-M1–9.0.85
OR
org.apache.tomcattomcat-websocketRange10.1.0-M1–10.1.18
OR
org.apache.tomcattomcat-websocketRange11.0.0-M1–11.0.0-M16
VendorProductVersionCPE
org.apache.tomcat.embedtomcat-embed-websocket*cpe:2.3:a:org.apache.tomcat.embed:tomcat-embed-websocket:*:*:*:*:*:*:*:*
org.apache.tomcattomcat-websocket*cpe:2.3:a:org.apache.tomcat:tomcat-websocket:*:*:*:*:*:*:*:*

Related

osv 12
redhat 8
redos 1
debiancve 1
nvd 1
redhatcve 1
cnvd 1
cve 1
ibm 13
ubuntucve 1
prion 1
nessus 33
vulnrichment 1
cvelist 1
cgr 1
amazon 2
veracode 1
wolfi 1
openvas 12
almalinux 2
debian 3
tomcat 4
mageia 1
kaspersky 1
fedora 2
oraclelinux 2
rocky 2
oracle 2
osv
osv
BIT-tomcat-2024-23672
2024-04-01 14:18:43
CGA-3pvg-mvwc-5c76
2024-06-06 12:22:03
Denial of Service via incomplete cleanup vulnerability in Apache Tomcat
2024-03-13 18:31:34
redhat
redhat
(RHSA-2024:1916) Important: Red Hat JBoss Web Server 6.0.2 release and security update
2024-05-07 12:59:16
(RHSA-2024:1913) Important: Red Hat JBoss Web Server 5.8.0 release and security update
2024-05-07 12:15:14
(RHSA-2024:1914) Important: Red Hat JBoss Web Server 5.8.0 release and security update
2024-05-07 12:17:38
redos
redos
ROS-20240422-09
2024-04-22 00:00:00
debiancve
debiancve
CVE-2024-23672
2024-03-13 16:15:29
nvd
nvd
CVE-2024-23672
2024-03-13 16:15:29
redhatcve
redhatcve
CVE-2024-23672
2024-03-14 21:39:59
cnvd
cnvd
Apache Tomcat Denial of Service Vulnerability (CNVD-2024-13569)
2024-03-15 00:00:00
cve
cve
CVE-2024-23672
2024-03-13 16:15:29
ibm
ibm
Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in tomcat-embed-websocket-9.0.83.jar
2024-04-25 06:23:43
Security Bulletin: Vulnerability in Apache Tomcat Server (CVE-2024-23672) affects Power HMC
2024-04-16 16:52:15
Security Bulletin: Vulnerabilities in Apache Tomcat affect IBM SAN Volume Controller, IBM Storwize, IBM Storage Virtualize and IBM FlashSystem products
2024-06-19 15:29:31
ubuntucve
ubuntucve
CVE-2024-23672
2024-03-13 00:00:00
prion
prion
Input validation
2024-03-13 16:15:00
nessus
nessus
RHEL 6 : apache_tomcat (Unpatched Vulnerability)
2024-05-11 00:00:00
RHEL 8 / 9 : Red Hat JBoss Web Server 6.0.2 (RHSA-2024:1916)
2024-05-07 00:00:00
Atlassian Confluence 2.6.0 < 7.19.22 / 7.20.x < 8.5.9 / 8.6.x < 8.9.1 DoS (CONFSERVER-95835)
2024-05-27 00:00:00
vulnrichment
vulnrichment
CVE-2024-23672 Apache Tomcat: WebSocket DoS with incomplete closing handshake
2024-03-13 15:48:42
cvelist
cvelist
CVE-2024-23672 Apache Tomcat: WebSocket DoS with incomplete closing handshake
2024-03-13 15:48:42
cgr
cgr
CVE-2024-23672 vulnerabilities
2024-05-19 03:07:16
amazon
amazon
Important: tomcat
2024-04-11 01:07:00
Important: tomcat8
2024-06-19 18:46:00
veracode
veracode
Denial Of Service (DoS)
2024-03-15 06:11:57
wolfi
wolfi
CVE-2024-23672 vulnerabilities
2024-10-16 03:12:41
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2024:1345-1)
2024-05-07 00:00:00
SUSE: Security Advisory (SUSE-SU-2024:1205-1)
2024-05-07 00:00:00
Fedora: Security Advisory (FEDORA-2024-2bf73514cd)
2024-06-13 00:00:00
almalinux
almalinux
Important: tomcat security and bug fix update
2024-06-06 00:00:00
Important: tomcat security and bug fix update
2024-05-23 00:00:00
debian
debian
[SECURITY] [DLA 3779-1] tomcat9 security update
2024-04-06 05:26:26
[SECURITY] [DSA 5665-1] tomcat10 security update
2024-04-17 22:03:15
[SECURITY] [DSA 5667-1] tomcat9 security update
2024-04-19 20:06:14
tomcat
tomcat
Fixed in Apache Tomcat 9.0.86
2024-02-19 00:00:00
Fixed in Apache Tomcat 8.5.99
2024-02-19 00:00:00
Fixed in Apache Tomcat 11.0.0-M17
2024-02-19 00:00:00
mageia
mageia
Updated tomcat packages fix security vulnerabilities
2024-03-27 01:02:49
kaspersky
kaspersky
KLA65144 Multiple vulnerabilities in Apache Tomcat
2024-02-19 00:00:00
fedora
fedora
[SECURITY] Fedora 39 Update: tomcat-9.0.89-1.fc39
2024-06-13 03:03:35
[SECURITY] Fedora 40 Update: tomcat-9.0.89-1.fc40
2024-06-23 06:52:19
oraclelinux
oraclelinux
tomcat security and bug fix update
2024-06-06 00:00:00
tomcat security and bug fix update
2024-05-23 00:00:00
rocky
rocky
tomcat security and bug fix update
2024-06-14 13:59:30
tomcat security and bug fix update
2024-06-14 14:00:40
oracle
oracle
Oracle Critical Patch Update Advisory - July 2024
2024-07-16 00:00:00
Oracle Critical Patch Update Advisory - April 2024
2024-04-16 00:00:00

AI Score

7.2

Confidence

High

EPSS

0

Percentile

10.4%

JSON
Related for GHSA-V682-8VV8-VPWR
osv12redhat8redos1debiancve1nvd1redhatcve1cnvd1cve1ibm13ubuntucve1prion1nessus33vulnrichment1cvelist1cgr1amazon2veracode1wolfi1openvas12almalinux2debian3tomcat4mageia1kaspersky1fedora2oraclelinux2rocky2oracle2