TencentOS Server 4: tomcat (TSSA-2024:0569)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0569 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

Linux Distros Unpatched Vulnerability : CVE-2024-38286

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M20, from...

Security Bulletin: IBM Integration Bus for z/OS is vulnerable to a denial of service due to Apache Tomcat (CVE-2024-38286)

Summary IBM Integration Bus for z/OS is vulnerable to a denial of service due to Apache Tomcat. Vulnerability Details CVEID:CVE-2024-38286 DESCRIPTION: Apache Tomcat is vulnerable to a denial of service, caused by the improper handling of the TLS handshake process under certain configurations. By...

Security Bulletin:  IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is affected by a Denial of Service Vulnerability in Apache Tomcat (CVE-2024-38286)

Summary Apache Tomcat is used by IBM DevOps Deploy / IBM UrbanCode Deploy UCD as part of its web interface. Apache Tomcat is vulnerable to a denial of service, caused by the improper handling of the TLS handshake process under certain configurations. By sending specially crafted requests, a remot...

Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for Nov 2024

Summary In addition to many updates of operating system level packages, the following security vulnerabilities are addressed with IBM Process Mining 1.15.0 IF004 Vulnerability Details CVEID:CVE-2024-38821 DESCRIPTION: VMware Tanzu Spring Security could allow a remote attacker to bypass security...

RHEL 8 : pki-deps:10.6 (RHSA-2024:8572)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:8572 advisory. The Public Key Infrastructure PKI Core contains fundamental packages required by Red Hat Certificate System. Security Fixes: tomcat: Denial of Servic...

com.addc:addc-svr-tomcat (>=2.6, <=2.9), com.fastchar:fastchar (>=1.6.1, <=1.6.2) +87 more potentially affected by CVE-2024-38286 via org.apache.tomcat:tomcat-coyote (>=8.5.35, <=8.5.100)

org.apache.tomcat:tomcat-coyote MAVEN version =8.5.35, =2.6, =1.6.1, =1.0.0, =1.0.28, =3.2.0, =2.0.0-beta1, =0.8.0, =1.8.0, =1.6.2, =1.6.2, =0.2.20, =0.2.9, =0.3.0, =0.3.1 and more Source cves: CVE-2024-38286 Source advisory: OSV:GHSA-7JQF-V358-P8G7...

com.addc:addc-svr-tomcat (>=2.6, <=2.9), com.fastchar:fastchar (>=1.6.1, <=1.6.2) +87 more potentially affected by CVE-2024-38286 via org.apache.tomcat:tomcat-coyote (>=8.5.35, <=8.5.100)

org.apache.tomcat:tomcat-coyote MAVEN version =8.5.35, =2.6, =1.6.1, =1.0.0, =1.0.28, =3.2.0, =2.0.0-beta1, =0.8.0, =1.8.0, =1.6.2, =1.6.2, =0.2.20, =0.2.9, =0.3.0, =0.3.1 and more Source cves: CVE-2024-38286 Source advisory: GHSA-7JQF-V358-P8G7...

codes.vps:tomcat-valve-request-filter (0.1), com.armanbilge:http4s-tomcat-server_2.12 (>=1.0-148-8da8898, <=1.0-377-020cf9e) +153 more potentially affected by CVE-2024-38286 via org.apache.tomcat:tomcat-coyote (>=9.0.13, <=9.0.89)

org.apache.tomcat:tomcat-coyote MAVEN version =9.0.13, =1.0-148-8da8898, =1.0-148-8da8898, =1.0-148-8da8898, =2.0.0, =3.2.1036, =1.0.1, =1.3.1, =6.35, =3.2.0, =3.2.0, =4.2.0 and more Source cves: CVE-2024-38286 Source advisory: GHSA-7JQF-V358-P8G7...

cn.hackyo:vsphere-samples-nodeps (6.7.0), com.github.psi-probe:psi-probe-tomcat7 (>=3.2.0, <=3.5.9) +5 more potentially affected by CVE-2024-38286 via org.apache.tomcat:tomcat-coyote (>=7.0.92, <=7.0.109)

org.apache.tomcat:tomcat-coyote MAVEN version =7.0.92, =3.2.0, =2.0.0-beta1, =7.0.92, =7.0.92, =7.0.92, =7.0.92, =7.0.109 Source cves: CVE-2024-38286 Source advisory: OSV:GHSA-7JQF-V358-P8G7...

codes.vps:tomcat-valve-request-filter (1.0), com.atomgraph:linkeddatahub (>=4.0.0, <=5.4.0) +78 more potentially affected by CVE-2024-38286 via org.apache.tomcat:tomcat-coyote (>=10.1.0-m1, <=10.1.24)

org.apache.tomcat:tomcat-coyote MAVEN version =10.1.0-m1, =4.0.0, =3.3.0, =0.2.0, =2.8.0, =2.3.0, =1.1.0-rc1, =1.0.2, =1.0.4, =1.0.2, =1.0.0, =1.0.0, =1.0.0, =1.0.18 and more Source cves: CVE-2024-38286 Source advisory: OSV:GHSA-7JQF-V358-P8G7...

codes.vps:tomcat-valve-request-filter (1.0), com.atomgraph:linkeddatahub (>=4.0.0, <=5.4.0) +78 more potentially affected by CVE-2024-38286 via org.apache.tomcat:tomcat-coyote (>=10.1.0-m1, <=10.1.24)

org.apache.tomcat:tomcat-coyote MAVEN version =10.1.0-m1, =4.0.0, =3.3.0, =0.2.0, =2.8.0, =2.3.0, =1.1.0-rc1, =1.0.2, =1.0.4, =1.0.2, =1.0.0, =1.0.0, =1.0.0, =1.0.18 and more Source cves: CVE-2024-38286 Source advisory: GHSA-7JQF-V358-P8G7...

com.github.psi-probe:psi-probe-tomcat11 (5.0.0), com.github.waffle:waffle-tomcat11 (3.4.0) +3 more potentially affected by CVE-2024-38286 via org.apache.tomcat:tomcat-coyote (>=11.0.0-m1, <=11.0.0-m20)

org.apache.tomcat:tomcat-coyote MAVEN version =11.0.0-m1, =11.0.0-m1, =11.0.0-m1, =11.0.0-m1, =11.0.0-m20 Source cves: CVE-2024-38286 Source advisory: OSV:GHSA-7JQF-V358-P8G7...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.6.0.0), ai.apiverse:apipulse (1.0.1) +13387 more potentially affected by CVE-2024-38286 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.13, <=9.0.89)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.13, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =1.4.2, =1.6.6, =j8.2.2.0, =j8.2.2.0, =2.1.0 and more Source cves: CVE-2024-38286 Source advisory: OSV:GHSA-7JQF-V358-P8G7...

io.sniffy:sniffy-integration-tests-tomcat (>=3.1.10, <=3.1.14), net.unit8.waitt.server:waitt-tomcat7 (>=1.3.0-beta1, <=1.3.0) +5 more potentially affected by CVE-2024-38286 via org.apache.tomcat.embed:tomcat-embed-core (>=7.0.92, <=7.0.109)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =7.0.92, =3.1.10, =1.3.0-beta1, =2.0.0, =7.0.92, =7.0.92, =4.3.0, =3.10.7, =4.8.0 Source cves: CVE-2024-38286 Source advisory: OSV:GHSA-7JQF-V358-P8G7...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0, <=4.6.0.0), ai.apiverse:apipulse (1.0.1) +13387 more potentially affected by CVE-2024-38286 via org.apache.tomcat.embed:tomcat-embed-core (>=9.0.13, <=9.0.89)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =9.0.13, =4.4.0.0, =0.0.12, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =1.4.2, =1.6.6, =j8.2.2.0, =j8.2.2.0, =2.1.0 and more Source cves: CVE-2024-38286 Source advisory: GHSA-7JQF-V358-P8G7...

ai.ylyue:yue-library-base (>=finchley.sr4, <=finchley.sr4.1), ai.ylyue:yue-library-base-crypto (>=finchley.sr4, <=finchley.sr4.1) +1187 more potentially affected by CVE-2024-38286 via org.apache.tomcat.embed:tomcat-embed-core (>=8.5.35, <=8.5.100)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.5.35, =finchley.sr4, =finchley.sr4, =finchley.sr4, =finchley.sr4, =finchley.sr4, =1.5.19.release, =1.5.19.release, =1.5.19.release, =1.9.0-m1, =1.7.0, =0.1.4-jdk1.8-releases, =0.1.4-jdk1.8-releases, =0.1.4-jdk1.8-releases, =0.0.1, =0.0.7...

ai.ylyue:yue-library-base (>=finchley.sr4, <=finchley.sr4.1), ai.ylyue:yue-library-base-crypto (>=finchley.sr4, <=finchley.sr4.1) +1187 more potentially affected by CVE-2024-38286 via org.apache.tomcat.embed:tomcat-embed-core (>=8.5.35, <=8.5.100)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =8.5.35, =finchley.sr4, =finchley.sr4, =finchley.sr4, =finchley.sr4, =finchley.sr4, =1.5.19.release, =1.5.19.release, =1.5.19.release, =1.9.0-m1, =1.7.0, =0.1.4-jdk1.8-releases, =0.1.4-jdk1.8-releases, =0.1.4-jdk1.8-releases, =0.0.1, =0.0.7...

ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (0.2.0), ai.ancf.lmos:lmos-router-llm-in-spring-cloud-gateway-demo (0.1.0) +4105 more potentially affected by CVE-2024-38286 via org.apache.tomcat.embed:tomcat-embed-core (>=10.1.0-m1, <=10.1.24)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.1.0-m1, =cloud-0.3, =0.0.22, =0.0.28, =0.0.11, =1.8.0, =2.1.0.release, =3.0.0, =2.10.0, =3.4.0 and more Source cves: CVE-2024-38286 Source advisory: OSV:GHSA-7JQF-V358-P8G7...

ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (0.2.0), ai.ancf.lmos:lmos-router-llm-in-spring-cloud-gateway-demo (0.1.0) +4105 more potentially affected by CVE-2024-38286 via org.apache.tomcat.embed:tomcat-embed-core (>=10.1.0-m1, <=10.1.24)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.1.0-m1, =cloud-0.3, =0.0.22, =0.0.28, =0.0.11, =1.8.0, =2.1.0.release, =3.0.0, =2.10.0, =3.4.0 and more Source cves: CVE-2024-38286 Source advisory: GHSA-7JQF-V358-P8G7...