Denial Of Service (DoS)

🗓️ 16 Oct 2024 05:46:00Reported by Veracode Vulnerability DatabaseType

Apache Tomcat is vulnerable to Denial Of Service due to insufficient resource limits in TLS handshake.

Reporter	Title	Published	Views	Family All 168
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining Interim Fix for Nov 2024	26 Nov 202409:40	–	ibm
IBM Security Bulletins	Security Bulletin: due to the use of Apache Tomcat, IBM webMethods developer portal is affected by Multiple Vulnerabilities	30 Sep 202510:47	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache Tomcat might affect IBM Storage Defender Copy Data Management.	16 May 202519:24	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DevOps Release addresses multiple vulnerabilities related to Apache Tomcat.	23 Jun 202513:12	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Integration Bus for z/OS is vulnerable to a denial of service due to Apache Tomcat (CVE-2024-38286)	28 Jan 202522:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DevOps Build addresses multiple vulnerabilities.	25 Jun 202511:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilites in IBM Rational Build Forge.	24 Jun 202506:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is affected by a Denial of Service Vulnerability in Apache Tomcat (CVE-2024-38286)	28 Jan 202522:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in tomcat-embed-core	24 Jan 202517:29	–	ibm
AstraLinux	Astra Linux - уязвимость в tomcat9	20 May 202605:53	–	astralinux

Vulners

Node

tomcat9 tomcat9Match9.0.40-1debian

AND

tomcat9 tomcat9Match9.0.43-1debian

AND

apache tomcat-utilRange9.0.13–9.0.89java

apache tomcat-utilRange10.1.0-M1–10.1.24java

apache tomcat-utilRange11.0.0-M1–11.0.0-M20java

Source	Link
github	www.github.com/apache/tomcat/commit/3344c17cef094da4bb616f4186ed32039627b543
github	www.github.com/apache/tomcat/commit/3197862639732e16ec1164557bcd289ebc116c93
github	www.github.com/apache/tomcat/commit/76c5cce6f0bcef14b0c21c38910371ca7d322d13
lists	www.lists.debian.org/debian-lts-announce/2025/01/msg00009.html
security-tracker	www.security-tracker.debian.org/tracker/CVE-2024-38286
github	www.github.com/advisories/GHSA-7jqf-v358-p8g7
lists	www.lists.apache.org/thread/wms60cvbsz3fpbz9psxtfx8r41jl6d4s
security	www.security.netapp.com/advisory/ntap-20241101-0010/
openwall	www.openwall.com/lists/oss-security/2024/09/23/2

04 Nov 2025 00:30Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.17.5 - 8.6

EPSS0.00401

SSVC