KLA65144 Multiple vulnerabilities in Apache Tomcat

Multiple vulnerabilities were found in Apache Tomcat. Malicious users can exploit these vulnerabilities to cause denial of service.

Below is a complete list of vulnerabilities:

1. A denial of service vulnerability in WebSocket client can be exploited remotely to cause denial of service.
2. A denial of service vulnerability in HTTP/2 request can be exploited remotely to cause denial of service.

Original advisories

Fixed in Apache Tomcat 8.5.99

Fixed in Apache Tomcat 9.0.86

Fixed in Apache Tomcat 10.1.19

Related products

Apache-Tomcat

CVE list

CVE-2024-24549 unknown

CVE-2024-23672 unknown

Solution

Update to the latest versionTomcat 9.0 Software DownloadsTomcat 8.5 Software Downloads

Tomcat 10.1 Software Downloads

Impacts

• DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

Affected Products

• Apache Tomcat 8.5.x earlier than 8.5.99Apache Tomcat 10.1.x earlier than 10.1.19Apache Tomcat 9.x earlier than 9.0.86