Denial Of Service (DoS)

🗓️ 15 Mar 2024 06:11:57Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 30 Views

Vulnerability in tomcat-websocket due to improper WebSocket connection cleanup

Reporter	Title	Published	Views	Family All 232
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining 1.14.4 IF001	14 May 202420:42	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Apache Tomcat Server (CVE-2024-23672) affects Power HMC	16 Apr 202416:52	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM webMethods API Management	25 Apr 202510:44	–	ibm
IBM Security Bulletins	Security Bulletin: Apache Tomcat is vulnerable to CVE-2024-24549 and CVE-2024-23672 used in IBM Maximo Application Suite - Monitor Component	2 May 202419:25	–	ibm
IBM Security Bulletins	Security Bulletin: QRadar Suite Software includes components with multiple known vulnerabilities	17 Jun 202420:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DevOps Release 7.0.0.1 addresses multiple vulnerabilities.	27 Mar 202417:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DevOps Build 7.0.0.1 addresses multiple vulnerabilities.	27 Mar 202417:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium is affected by denial of service vulnerabilities (CVE-2024-24549, CVE-2024-23672, CVE-2024-0727, CVE-2023-6129)	29 Aug 202415:33	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Business Automation Manager Open Editions 8.0.7.	9 Apr 202514:41	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Integration Bus for z/OS is vulnerable to a denial of service due to Apache Tomcat (CVE-2024-24549, CVE-2024-23672)	5 Apr 202411:18	–	ibm

Vulners

Node

tomcat9 tomcat9Match9.0.40-1debian

AND

debian debian_linuxMatch999

tomcat9 tomcat9Match9.0.31-1~deb10u3debian

AND

tomcat9 tomcat9Match9.0.31-1~deb10u4debian

AND

tomcat9 tomcat9Match9.0.31-1~deb10u2debian

AND

tomcat9 tomcat9Match9.0.31-1~deb10u5debian

AND

debian debian_linuxMatch10

tomcat9 tomcat9Match9.0.43-1debian

AND

debian debian_linuxMatch11

apache tomcat-embed-websocketRange8.5.0–8.5.98java

apache tomcat-embed-websocketRange9.0.0.M1–9.0.85java

apache tomcat-embed-websocketRange10.0.0-M1–10.1.18java

apache tomcat-embed-websocketRange11.0.0-M1–11.0.0-M16java

apache tomcat-websocketRange11.0.0-M1–11.0.0-M16java

apache tomcat-websocketRange10.0.0-M1–10.1.18java

apache tomcat-websocketRange9.0.0.M1–9.0.85java

apache tomcat-websocketRange8.5.0–8.5.98java

Source	Link
tomcat	www.tomcat.apache.org/security-10.html
tomcat	www.tomcat.apache.org/security-11.html
github	www.github.com/apache/tomcat/commit/b0e3b1bd78de270d53e319d7cb79eb282aa53cb9
tomcat	www.tomcat.apache.org/security-8.html
tomcat	www.tomcat.apache.org/security-9.html
lists	www.lists.apache.org/thread/cmpswfx6tj4s7x0nxxosvfqs11lvdx2f
lists	www.lists.debian.org/debian-lts-announce/2024/04/msg00001.html
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/3UWIS5MMGYDZBLJYT674ZI5AWFHDZ46B/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/736G4GPZWS2DSQO5WKXO3G6OMZKFEK55/
security	www.security.netapp.com/advisory/ntap-20240402-0002/

13 Feb 2025 19:30Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.16.3

EPSS0.02313

SSVC