Lucene search
GoogleOSV:BIT-TOMCAT-2024-24549HistoryApr 01, 2024 - 2:18 p.m.
BIT-tomcat-2024-24549
2024-04-0114:18:33
Google
osv.dev
23
denial of service
apache tomcat
input validation
http/2
upgrade
Denial of Service due to improper input validation vulnerability for HTTP/2 requests in Apache Tomcat. When processing an HTTP/2 request, if the request exceeded any of the configured limits for headers, the associated HTTP/2 stream was not reset until after all of the headers had been processed.This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M16, from 10.1.0-M1 through 10.1.18, from 9.0.0-M1 through 9.0.85, from 8.5.0 through 8.5.98.Users are recommended to upgrade to version 11.0.0-M17, 10.1.19, 9.0.86 or 8.5.99 which fix the issue.
Related
nessus
nessus
Atlassian Confluence 2.6.0 < 7.19.22 / 7.20.x < 8.5.9 / 8.6.x < 8.9.1 DoS (CONFSERVER-95834)
2024-05-27 00:00:00
RHEL 8 : tomcat6 (Unpatched Vulnerability)
2024-06-03 00:00:00
RHEL 9 : tomcat6 (Unpatched Vulnerability)
2024-06-03 00:00:00
ubuntucve
ubuntucve
CVE-2024-24549
2024-03-13 00:00:00
cgr
cgr
CVE-2024-24549 vulnerabilities
2024-05-19 03:07:16
veracode
veracode
Denial Of Service (DoS)
2024-03-16 20:57:13
cvelist
cvelist
CVE-2024-24549 Apache Tomcat: HTTP/2 header handling DoS
2024-03-13 15:46:53
github
github
cve
cve
CVE-2024-24549
2024-03-13 16:15:29
nvd
nvd
CVE-2024-24549
2024-03-13 16:15:29
prion
prion
Input validation
2024-03-13 16:15:00
debiancve
debiancve
CVE-2024-24549
2024-03-13 16:15:29
wolfi
wolfi
CVE-2024-24549 vulnerabilities
2024-06-28 09:08:32
vulnrichment
vulnrichment
CVE-2024-24549 Apache Tomcat: HTTP/2 header handling DoS
2024-03-13 15:46:53
osv
osv
Apache Tomcat Denial of Service due to improper input validation vulnerability for HTTP/2 requests
2024-03-13 18:31:34
tomcat9 - security update
2024-04-06 00:00:00
Important: tomcat security and bug fix update
2024-05-23 00:00:00
ibm
ibm
hackerone
hackerone
Internet Bug Bounty: Denial of Service caused by HTTP/2 CONTINUATION Flood
2024-01-25 12:51:50
openvas
openvas
openSUSE: Security Advisory for tomcat10 (SUSE-SU-2024:1204-1)
2024-04-17 00:00:00
Mageia: Security Advisory (MGASA-2024-0090)
2024-04-05 00:00:00
Debian: Security Advisory (DLA-3779-1)
2024-04-08 00:00:00
almalinux
almalinux
Important: tomcat security and bug fix update
2024-05-23 00:00:00
Important: tomcat security and bug fix update
2024-06-06 00:00:00
rocky
rocky
tomcat security and bug fix update
2024-06-14 14:00:40
fedora
fedora
[SECURITY] Fedora 40 Update: tomcat-9.0.89-1.fc40
2024-06-23 06:52:19
[SECURITY] Fedora 39 Update: tomcat-9.0.89-1.fc39
2024-06-13 03:03:35
redhat
redhat
(RHSA-2024:3307) Important: tomcat security and bug fix update
2024-05-23 05:51:20
(RHSA-2024:3308) Important: tomcat security and bug fix update
2024-05-23 05:51:21
debian
debian
[SECURITY] [DLA 3779-1] tomcat9 security update
2024-04-06 05:26:26
[SECURITY] [DSA 5667-1] tomcat9 security update
2024-04-19 20:06:14
[SECURITY] [DSA 5665-1] tomcat10 security update
2024-04-17 22:03:15
tomcat
tomcat
Fixed in Apache Tomcat 9.0.86
2024-02-19 00:00:00
Fixed in Apache Tomcat 11.0.0-M17
2024-02-19 00:00:00
Fixed in Apache Tomcat 10.1.19
2024-02-19 00:00:00
redhatcve
redhatcve
CVE-2024-24549
2024-03-14 21:40:09
amazon
amazon
Important: tomcat8
2024-06-19 18:46:00
oraclelinux
oraclelinux
tomcat security and bug fix update
2024-05-23 00:00:00
tomcat security and bug fix update
2024-06-06 00:00:00
kaspersky
kaspersky
KLA65144 Multiple vulnerabilities in Apache Tomcat
2024-02-19 00:00:00
mageia
mageia
Updated tomcat packages fix security vulnerabilities
2024-03-27 01:02:49
thn
thn
New HTTP/2 Vulnerability Exposes Web Servers to DoS Attacks
2024-04-04 11:15:00
oracle
oracle
Oracle Critical Patch Update Advisory - April 2024
2024-04-16 00:00:00
7.2 High
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
10.4%
Related for OSV:BIT-TOMCAT-2024-24549