ROOT-APP-MAVEN-CVE-2024-38809 CVE-2024-38809 in org.springframework:spring-web - Patched by Root

Root has patched CVE-2024-38809 in the org.springframework:spring-web package for Root:Maven. Multiple fixed versions available...

Security Bulletin: IBM Watson Speech Services Cartridge v4.8.8 is vulnerable to a denial of service in VMware Tanzu Spring [CVE-2024-38809]

Summary IBM Watson Speech Services Cartridge is vulnerable to a denial of service in VMware Tanzu Spring, caused by improper input validation CVE-2024-38809. VMware Tanzu Spring is used in our Speech microservices. This vulnerabilitiy has been addressed. Please read the details for remediation...

Linux Distros Unpatched Vulnerability : CVE-2024-38809

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Applications that parse ETags from If-Match or If-None-Match request headers are vulnerable to DoS attack. Users of affected versions should upgrade to the...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a denial of service in Spring Framework [CVE-2024-38809]

Summary IBM Watson Speech Services Cartridge is vulnerable to a denial of service in Spring Framework, caused by improper input validation CVE-2024-38809. Spring Framework is used by our Speech Microservices. This vulnerabilitiy has been addressed. Please read the details for remediation below...

Security Bulletin: IBM Maximo Application Suite - Monitor Component is vulnerable to spring-web-6.1.11.jar CVE-2024-38809

Summary IBM Maximo Application Suite - Monitor Component is vulnerable to spring-web-6.1.11.jar CVE-2024-38809. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2024-38809 DESCRIPTION: VMware Tanzu Spring Framework is vulnerable to a denia...

Security Bulletin: Vulnerability in Spring Framework affects IBM Tivoli Application Dependency Discovery Manager (CVE-2024-38808,CVE-2024-38809).

Summary Vulnerability in Spring Framework affects IBM Tivoli Application Dependency Discovery Manager CVE-2024-38808,CVE-2024-38809. IBM has addressed the vulnerabilities. Vulnerability Details CVEID:CVE-2024-38809 DESCRIPTION: VMware Tanzu Spring Framework is vulnerable to a denial of service,...

CVE-2024-38809

creationtimestamp| type| source ---|---|--- 2024-09-27 20:05:03+00:00| seen| https://t.me/cvedetector/6564...

CVE-2024-38809 vulnerabilities

Vulnerabilities for packages: thingsboard, apache-nifi...

CVE-2024-38809

Applications that parse ETags from "If-Match" or "If-None-Match" request headers are vulnerable to DoS attack. Users of affected versions should upgrade to the corresponding fixed version. Users of older, unsupported versions could enforce a size limit on "If-Match" and "If-None-Match" headers,...

ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (0.2.0), ai.ancf.lmos:arc-graphql-spring-boot-starter (>=0.70.0, <=0.74.0) +7225 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (>=6.1.0, <=6.1.11)

org.springframework:spring-web MAVEN version =6.1.0, =0.70.0, =0.1.0, =0.5.0, =0.6.0, =0.6.0, =0.5.0, =0.6.0, =0.6.0, =0.5.0, =0.9.1, =0.7.0, =0.7.0, =0.9.2 and more Source cves: CVE-2024-38809 Source advisory: MEND:CVE-2024-38809...

aendter.jenkins.plugins:filesystem-list-parameter-plugin (>=0.0.1, <=0.0.6), africa.absa:inception-api (>=1.0.0, <=1.2.0) +38330 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (>=1.2.1, <=5.3.37)

org.springframework:spring-web MAVEN version =1.2.1, =0.0.1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =4.4.0.0, =4.6.0.0 and more Source cves: CVE-2024-38809 Source advisory: MEND:CVE-2024-38809...

CVE-2024-38809

Applications that parse ETags from "If-Match" or "If-None-Match" request headers are vulnerable to DoS attack. Users of affected versions should upgrade to the corresponding fixed version. Users of older, unsupported versions could enforce a size limit on "If-Match" and "If-None-Match" headers,...

ch.ralscha:extdirectspring (1.7.3), cn.afterturn:easypoi-spring-boot-starter (>=0.1, <=0.1.1) +1020 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (4.3.12.release)

org.springframework:spring-web MAVEN version 4.3.12.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - ch.ralscha:extdirectspring 1.7.3 - cn.afterturn:easypoi-spring-boot-starter =0.1, =1.2,...

ch.sbb.releasetrain:jsfbootadapter (0.0.25), ch.sbb.releasetrain:webui (0.0.25) +380 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (4.2.7.release)

org.springframework:spring-web MAVEN version 4.2.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - ch.sbb.releasetrain:jsfbootadapter 0.0.25 - ch.sbb.releasetrain:webui 0.0.25 -...

br.com.anteros:anteros-jsondoc-springboot (1.0.0), ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (1.5) +544 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (4.2.5.release)

org.springframework:spring-web MAVEN version 4.2.5.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - br.com.anteros:anteros-jsondoc-springboot 1.0.0 - ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base...

org.acegisecurity:acegi-security (>=1.0.0-rc2, <=1.0.0), org.acegisecurity:acegi-security-adapters (1.0.0) +13 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (2.0-m2)

org.springframework:spring-web MAVEN version 2.0-m2 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - org.acegisecurity:acegi-security =1.0.0-rc2, =1.0.0-rc2, =1.0.0 - org.apache.pluto:pluto-portal...

ch.codeblock.qrinvoice.rest:qrinvoice-rest-standalone (>=0.7, <=0.8), ch.rasc:sse-eventbus (1.1.6) +785 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (4.3.14.release)

org.springframework:spring-web MAVEN version 4.3.14.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - ch.codeblock.qrinvoice.rest:qrinvoice-rest-standalone =0.7, =0.1.6-v1, =1.0.1, =2.0.0 and...

com.att.nsa:msgrtr (0.0.5), com.comcast.magic-wand:appium (>=4.0.1, <=4.0.3) +47 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (3.2.14.release)

org.springframework:spring-web MAVEN version 3.2.14.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.att.nsa:msgrtr 0.0.5 - com.comcast.magic-wand:appium =4.0.1, =4.0.3 -...

cn.home1:spring-cloud-config-monitor (>=0.0.1, <=1.0.1.u1), cn.home1:spring-cloud-config-server (>=0.0.1, <=1.0.1.u1) +552 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (4.3.16.release)

org.springframework:spring-web MAVEN version 4.3.16.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - cn.home1:spring-cloud-config-monitor =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =1.0.1.releas...

com.bytebybyte:google-geocoding (>=3.0.0, <=3.0.1), com.bytebybyte:mapquest-open-geocoding (1.0.0) +102 more potentially affected by CVE-2024-38809 via org.springframework:spring-web (4.0.7.release)

org.springframework:spring-web MAVEN version 4.0.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-web and may be impacted: - com.bytebybyte:google-geocoding =3.0.0, =0.0.1, =1.0.2, =1.0.2, =1.0.2, =1.2.3.release,...