Lucene search
PRIOn knowledge basePRION:CVE-2024-23672HistoryMar 13, 2024 - 4:15 p.m.
Input validation
2024-03-1316:15:00
PRIOn knowledge base
www.prio-n.com
9
apache tomcat
denial of service
incomplete cleanup
upgrade
websocket
vulnerability
resource consumption
nvd
version 11.0.0-m17
version 10.1.19
version 9.0.86
version 8.5.99
Denial of Service via incomplete cleanup vulnerability in Apache Tomcat. It was possible for WebSocket clients to keep WebSocket connections open leading to increased resource consumption.This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M16, from 10.1.0-M1 through 10.1.18, from 9.0.0-M1 through 9.0.85, from 8.5.0 through 8.5.98.
Users are recommended to upgrade to version 11.0.0-M17, 10.1.19, 9.0.86 or 8.5.99 which fix the issue.
Related
redos
redos
ROS-20240422-09
2024-04-22 00:00:00
debiancve
debiancve
CVE-2024-23672
2024-03-13 16:15:29
redhat
redhat
redhatcve
redhatcve
CVE-2024-23672
2024-03-14 21:39:59
osv
osv
BIT-tomcat-2024-23672
2024-04-01 14:18:43
Denial of Service via incomplete cleanup vulnerability in Apache Tomcat
2024-03-13 18:31:34
tomcat9 - security update
2024-04-06 00:00:00
cnvd
cnvd
Apache Tomcat Denial of Service Vulnerability (CNVD-2024-13569)
2024-03-15 00:00:00
cve
cve
CVE-2024-23672
2024-03-13 16:15:29
nessus
nessus
RHEL 6 : apache_tomcat (Unpatched Vulnerability)
2024-05-11 00:00:00
RHEL 8 / 9 : Red Hat JBoss Web Server 6.0.2 (RHSA-2024:1916)
2024-05-07 00:00:00
RHEL 7 / 9 : Red Hat JBoss Web Server 5.8.0 (RHSA-2024:1913)
2024-05-07 00:00:00
github
github
Denial of Service via incomplete cleanup vulnerability in Apache Tomcat
2024-03-13 18:31:34
cvelist
cvelist
ubuntucve
ubuntucve
CVE-2024-23672
2024-03-13 00:00:00
ibm
ibm
cgr
cgr
CVE-2024-23672 vulnerabilities
2024-05-19 03:07:16
wolfi
wolfi
CVE-2024-23672 vulnerabilities
2024-05-19 09:07:15
amazon
amazon
Important: tomcat
2024-04-11 01:07:00
veracode
veracode
Denial Of Service (DoS)
2024-03-15 06:11:57
mageia
mageia
Updated tomcat packages fix security vulnerabilities
2024-03-27 01:02:49
tomcat
tomcat
Fixed in Apache Tomcat 8.5.99
2024-02-19 00:00:00
Fixed in Apache Tomcat 9.0.86
2024-02-19 00:00:00
Fixed in Apache Tomcat 10.1.19
2024-02-19 00:00:00
debian
debian
[SECURITY] [DLA 3779-1] tomcat9 security update
2024-04-06 05:26:50
[SECURITY] [DSA 5665-1] tomcat10 security update
2024-04-17 22:03:15
[SECURITY] [DSA 5667-1] tomcat9 security update
2024-04-19 20:06:14
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2024:1345-1)
2024-05-07 00:00:00
Apache Tomcat Multiple DoS Vulnerabilities (Mar 2024) - Linux
2024-03-13 00:00:00
Apache Tomcat Multiple DoS Vulnerabilities (Mar 2024) - Windows
2024-03-13 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - April 2024
2024-04-16 00:00:00