GHSA-JM7M-8JH6-29HP Apache Tomcat Incomplete Cleanup vulnerability

🗓️ 10 Oct 2023 18:31:35Reported by GoogleType

osv🔗 osv.dev👁 5 Views

Tomcat file upload cleanup may cause Windows denial of service via disk full; fixed in 9.0.81 and 8.5.94.

Reporter	Title	Published	Views	Family All 102
ibm	Security Bulletin: IBM Operational Decision Manager November 2023 - Multiple CVEs addressed	15 Nov 202313:37	–	ibm
ibm	Security Bulletin: IBM Rational Build Forge 8.0.0.25 addresses multiple vulnerabilities	24 Nov 202313:49	–	ibm
ibm	Security Bulletin: IBM DevOps Release 7.0.0 addresses multiple vulnerabilities.	4 Jan 202407:16	–	ibm
ibm	Security Bulletin: IBM Integration Bus is vulnerable to HTTP request smuggling and a denial of service due to Apache Tomcat. (CVE-2023-46589, CVE-2023-42794)	3 Jan 202414:43	–	ibm
ibm	Security Bulletin: IBM UrbanCode Deploy (UCD) is susceptible to multiple Apache Tomcat vulnerabilities (CVE-2023-42794, CVE-2023-42795, CVE-2023-44487)	13 Dec 202321:50	–	ibm
ibm	Security Bulletin: IBM Integration Bus is vulnerable to multiple CVEs due to Apache Tomcat.	14 Nov 202311:07	–	ibm
ibm	Security Bulletin: Vulnerability in Apache Tomcat affects App Connect Professional.	29 Dec 202307:50	–	ibm
ibm	Security Bulletin: IBM Sterling B2B Integrator Document Service container vulnerable to multiple issues due to Apache Tomcat	11 Apr 202413:22	–	ibm
ibm	Security Bulletin: IBM Security Guardium is affected by vulnerabilities in Tomcat (CVE-2023-45648, CVE-2023-42795, CVE-2023-42794)	15 Jul 202419:42	–	ibm
ibm	Security Bulletin: IBM DevOps Build 7.0.0 addresses multiple vulnerabilities.	4 Jan 202407:11	–	ibm

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-42794
github	www.github.com/apache/tomcat
lists	www.lists.apache.org/thread/vvbr2ms7lockj1hlhz5q3wmxb2mwcw82
openwall	www.openwall.com/lists/oss-security/2023/10/10/8

13 Feb 2025 19:16Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.15.9

EPSS0.01854