Lucene search
Ubuntu.comUB:CVE-2023-34981HistoryJun 21, 2023 - 12:00 a.m.
CVE-2023-34981
2023-06-2100:00:00
ubuntu.com
ubuntu.com
13
apache
tomcat
ajp proxy
0.002 Low
EPSS
Percentile
60.9%
A regression in the fix for bug 66512 in Apache Tomcat 11.0.0-M5, 10.1.8,
9.0.74 and 8.5.88 meant that, if a response did not include any HTTP
headers no AJP SEND_HEADERS messare woudl be sent for the response which in
turn meant that at least one AJP proxy (mod_proxy_ajp) would use the
response headers from the previous request leading to an information leak.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 14.04 | noarch | tomcat6 | < any | UNKNOWN |
| ubuntu | 16.04 | noarch | tomcat6 | < any | UNKNOWN |
| ubuntu | 18.04 | noarch | tomcat7 | < any | UNKNOWN |
| ubuntu | 14.04 | noarch | tomcat7 | < any | UNKNOWN |
| ubuntu | 16.04 | noarch | tomcat7 | < any | UNKNOWN |
| ubuntu | 18.04 | noarch | tomcat8 | < any | UNKNOWN |
| ubuntu | 16.04 | noarch | tomcat8 | < any | UNKNOWN |
| ubuntu | 18.04 | noarch | tomcat9 | < any | UNKNOWN |
| ubuntu | 20.04 | noarch | tomcat9 | < any | UNKNOWN |
| ubuntu | 22.04 | noarch | tomcat9 | < any | UNKNOWN |
Related
f5
f5
K000135223 : Apache Tomcat vulnerability CVE-2023-34981
2023-06-26 00:00:00
ibm
ibm
tomcat
tomcat
Fixed in Apache Tomcat 9.0.75
2023-05-10 00:00:00
Fixed in Apache Tomcat 10.1.9
2023-05-19 00:00:00
Fixed in Apache Tomcat 8.5.89
2023-05-19 00:00:00
redhatcve
redhatcve
CVE-2023-34981
2023-06-23 10:17:08
prion
prion
Design/Logic Flaw
2023-06-21 11:15:00
osv
osv
Apache Tomcat vulnerable to information leak
2023-06-21 12:30:19
CVE-2023-34981
2023-06-21 11:15:09
BIT-tomcat-2023-34981
2024-03-06 11:08:35
openvas
openvas
Apache Tomcat Information Disclosure Vulnerability (Jun 2023) - Linux
2023-06-22 00:00:00
Apache Tomcat Information Disclosure Vulnerability (Jun 2023) - Windows
2023-06-22 00:00:00
nessus
nessus
Apache Tomcat 8.5.0 < 8.5.89
2023-06-21 00:00:00
Apache Tomcat 10.1.0 < 10.1.9
2023-06-21 00:00:00
Apache Tomcat 9.0.0 < 9.0.75
2023-06-21 00:00:00
redos
redos
ROS-20240410-01
2024-04-10 00:00:00
debiancve
debiancve
CVE-2023-34981
2023-06-21 11:15:09
cvelist
cvelist
CVE-2023-34981 Apache Tomcat: AJP response header mix-up
2023-06-21 10:26:16
veracode
veracode
Information Disclosure
2023-06-29 03:14:04
github
github
Apache Tomcat vulnerable to information leak
2023-06-21 12:30:19
kaspersky
kaspersky
KLA50475 OSI vulnerability in Apache Tomcat
2023-05-10 00:00:00
KLA50474 OSI vulnerability in Apache Tomcat
2023-05-19 00:00:00
cve
cve
CVE-2023-34981
2023-06-21 11:15:09
atlassian
atlassian
Upgrade Tomcat to fix CVE-2023-28709
2023-06-06 02:52:01
Upgrade Tomcat to fix CVE-2023-34981
2023-06-26 07:32:46
photon
photon
Important Photon OS Security Update - PHSA-2023-4.0-0466
2023-09-07 00:00:00
Important Photon OS Security Update - PHSA-2023-5.0-0093
2023-09-13 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2023
2023-10-17 00:00:00
Oracle Critical Patch Update Advisory - January 2024
2024-01-16 00:00:00
Oracle Critical Patch Update Advisory - July 2023
2023-07-18 00:00:00