Incorrect Object Recycling And Re-use

🗓️ 21 Nov 2024 11:55:55Reported by Veracode Vulnerability DatabaseType

Apache Tomcat vulnerable to object reuse, risking user data mix-up due to flawed HTTP/2 logic.

Reporter	Title	Published	Views	Family All 78
IBM Security Bulletins	Security Bulletin: IBM Integration Bus for z/OS is vulnerable to a remote attack due to Apache Tomcat (CVE-2024-52317)	28 Jan 202522:08	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities found in IBM ApplinX.	15 Apr 202503:49	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Apache Tomcat Server (CVE-2024-52317) affects Power HMC.	18 Feb 202511:41	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DevOps Release addresses multiple vulnerabilities related to Apache Tomcat.	23 Jun 202513:12	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache Tomcat affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component.	13 Mar 202516:44	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining 2.0	15 Apr 202503:20	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DevOps Build addresses multiple vulnerabilities.	25 Jun 202511:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilites in IBM Rational Build Forge.	24 Jun 202506:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security SOAR is using a component with known vulnerabilities (CVE-2024-52316, CVE-2024-52317, CVE-2024-52318)	28 Jan 202522:08	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache Tomcat affect watsonx.data	27 Feb 202513:22	–	ibm

Vulners

Node

apache tomcat-embed-coreRange9.0.92–9.0.95java

apache tomcat-embed-coreRange10.1.27–10.1.30java

apache tomcat-embed-coreRange11.0.0-M23–11.0.0-M26java

apache tomcat-coyoteRange9.0.92–9.0.95java

apache tomcat-coyoteRange10.1.27–10.1.30java

apache tomcat-coyoteRange11.0.0-M23–11.0.0-M26java

Source	Link
github	www.github.com/apache/tomcat/commit/9e840ccacb40881c03a03b1e0746bfba7369b3bd
github	www.github.com/apache/tomcat/commit/146f94f87ea398fb592c7a20a5ccbef95e9dd72b
github	www.github.com/apache/tomcat/commit/47307ee27abcdea2ee40e33897aca760083de46a
lists	www.lists.apache.org/thread/ty376mrxy1mmxtw3ogo53nc9l3co3dfs
github	www.github.com/advisories/GHSA-qvf5-hvjx-wm27
security	www.security.netapp.com/advisory/ntap-20250124-0004/
openwall	www.openwall.com/lists/oss-security/2024/11/18/3

15 May 2025 18:19Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.16.5

EPSS0.215

SSVC