Lucene search
RedHatRHSA-2024:5696HistoryAug 21, 2024 - 11:10 a.m.
(RHSA-2024:5696) Important: tomcat security update
2024-08-2111:10:42
access.redhat.com
6
rhsa-2024-5696
tomcat
security fix
exceptional conditions
cve-2024-34750
cvss
unix
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
7.3
Confidence
Low
Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies.
Security Fix(es):
- tomcat: Improper Handling of Exceptional Conditions (CVE-2024-34750)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 9 | noarch | tomcat-webapps | < 9.0.87-1.el9_2.2 | tomcat-webapps-9.0.87-1.el9_2.2.noarch.rpm |
| RedHat | 9 | noarch | tomcat | < 9.0.87-1.el9_2.2 | tomcat-9.0.87-1.el9_2.2.noarch.rpm |
| RedHat | 9 | noarch | tomcat-docs-webapp | < 9.0.87-1.el9_2.2 | tomcat-docs-webapp-9.0.87-1.el9_2.2.noarch.rpm |
| RedHat | 9 | noarch | tomcat-lib | < 9.0.87-1.el9_2.2 | tomcat-lib-9.0.87-1.el9_2.2.noarch.rpm |
| RedHat | 9 | noarch | tomcat-el-3.0-api | < 9.0.87-1.el9_2.2 | tomcat-el-3.0-api-9.0.87-1.el9_2.2.noarch.rpm |
| RedHat | 9 | noarch | tomcat-admin-webapps | < 9.0.87-1.el9_2.2 | tomcat-admin-webapps-9.0.87-1.el9_2.2.noarch.rpm |
| RedHat | 9 | noarch | tomcat-jsp-2.3-api | < 9.0.87-1.el9_2.2 | tomcat-jsp-2.3-api-9.0.87-1.el9_2.2.noarch.rpm |
| RedHat | 9 | noarch | tomcat-servlet-4.0-api | < 9.0.87-1.el9_2.2 | tomcat-servlet-4.0-api-9.0.87-1.el9_2.2.noarch.rpm |
Related
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2024:2485-1)
2024-07-16 00:00:00
Apache Tomcat DoS Vulnerability (Jul 2024) - Windows
2024-07-04 00:00:00
Mageia: Security Advisory (MGASA-2024-0267)
2024-07-16 00:00:00
nessus
nessus
SUSE SLES15 / openSUSE 15 Security Update : tomcat10 (SUSE-SU-2024:2413-1)
2024-07-12 00:00:00
RHEL 9 : tomcat (RHSA-2024:5693)
2024-08-21 00:00:00
Apache Tomcat 9.0.0.M1 < 9.0.90
2024-07-03 00:00:00
tomcat
tomcat
Fixed in Apache Tomcat 10.1.25
2024-06-19 00:00:00
Fixed in Apache Tomcat 11.0.0-M21
2024-06-18 00:00:00
Fixed in Apache Tomcat 9.0.90
2024-06-19 00:00:00
osv
osv
Important: tomcat security update
2024-09-17 00:54:54
Important: tomcat security update
2024-08-21 00:00:00
Important: tomcat security update
2024-08-21 00:00:00
redhat
redhat
(RHSA-2024:4976) Important: Red Hat JBoss Web Server 6.0.3 release and security update
2024-08-06 11:05:52
(RHSA-2024:5693) Important: tomcat security update
2024-08-21 11:10:23
(RHSA-2024:5694) Important: tomcat security update
2024-08-21 11:10:30
almalinux
almalinux
Important: tomcat security update
2024-08-21 00:00:00
Important: tomcat security update
2024-08-21 00:00:00
redos
redos
ROS-20240827-11
2024-08-27 00:00:00
oraclelinux
oraclelinux
tomcat security update
2024-08-21 00:00:00
tomcat security update
2024-08-21 00:00:00
redhatcve
redhatcve
CVE-2024-34750
2024-07-03 23:20:39
rocky
rocky
tomcat security update
2024-09-17 00:54:54
tomcat security update
2024-09-17 00:55:59
atlassian
atlassian
kaspersky
kaspersky
KLA70302 SB vulnerability in Apache Tomcat
2024-07-03 00:00:00
ibm
ibm
mageia
mageia
Updated tomcat packages fix security vulnerability
2024-07-15 19:54:48
ubuntucve
ubuntucve
CVE-2024-34750
2024-07-03 00:00:00
nvd
nvd
CVE-2024-34750
2024-07-03 20:15:04
vulnrichment
vulnrichment
CVE-2024-34750 Apache Tomcat: HTTP/2 excess header handling DoS
2024-07-03 19:32:34
cvelist
cvelist
CVE-2024-34750 Apache Tomcat: HTTP/2 excess header handling DoS
2024-07-03 19:32:34
github
github
Apache Tomcat - Denial of Service
2024-07-03 21:39:44
hackerone
hackerone
cve
cve
CVE-2024-34750
2024-07-03 20:15:04
veracode
veracode
Denial Of Service (DoS)
2024-07-04 11:45:19
debiancve
debiancve
CVE-2024-34750
2024-07-03 20:15:04
f5
f5
K000140303: Apache Tomcat vulnerability CVE-2024-34750
2024-07-11 00:00:00
wolfi
wolfi
CVE-2024-34750 vulnerabilities
2024-09-19 09:11:50
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
7.3
Confidence
Low
Related for RHSA-2024:5696