Lucene search

K
mageiaGentoo FoundationMGASA-2024-0090
HistoryMar 27, 2024 - 1:02 a.m.

Updated tomcat packages fix security vulnerabilities

2024-03-2701:02:49
Gentoo Foundation
advisories.mageia.org
28
tomcat
security
vulnerabilities
denial of service
websocket
http/2
apache

7.3 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

14.6%

Denial of Service via incomplete cleanup vulnerability in Apache Tomcat. It was possible for WebSocket clients to keep WebSocket connections open leading to increased resource consumption. (CVE-2024-23672) Denial of Service due to improper input validation vulnerability for HTTP/2 requests in Apache Tomcat. When processing an HTTP/2 request, if the request exceeded any of the configured limits for headers, the associated HTTP/2 stream was not reset until after all of the headers had been processed. (CVE-2024-24549)

OSVersionArchitecturePackageVersionFilename
Mageia9noarchtomcat< 9.0.87-1tomcat-9.0.87-1.mga9