Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
mageiaGentoo FoundationMGASA-2023-0138
HistoryApr 15, 2023 - 10:03 p.m.

Updated tomcat packages fix security vulnerability

2023-04-1522:03:44
Gentoo Foundation
advisories.mageia.org
61
tomcat
security vulnerability
cve-2021-43980
cve-2020-9484
cve-2022-23181
cve-2022-29885
cve-2022-34305
cve-2022-42252
cve-2022-45143
cve-2023-24998
cve-2023-28708
unix

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.922 High

EPSS

Percentile

99.0%

JSON

Information disclosure due to concurrency bug (CVE-2021-43980) Fix for CVE-2020-9484 introduced a time of check, time of use vulnerability (CVE-2022-23181) Correct documentation to warn of use over untrusted networks. (CVE-2022-29885) Correct documentation showing use of XSS vulnerability. (CVE-2022-34305) Fix to reject invalid Content-Length header (CVE-2022-42252) Fix escaping of the type, message or description values. (CVE-2022-45143) Fix FileUpload limiting of the number of request parts to be processed to prevent the possibility of an attacker triggering a DoS (CVE-2023-24998) Fix setting of session cookie secure attribute when using RemoteIpFilter with X-Forwarded-Proto header set to https (CVE-2023-28708) Obsolete tomcat-jsvc

OSVersionArchitecturePackageVersionFilename
Mageia8noarchtomcat< 9.0.73-1.1tomcat-9.0.73-1.1.mga8

Related

openvas 18
nessus 54
debian 4
ibm 19
osv 18
redhat 7
amazon 2
tomcat 17
prion 4
nvd 3
f5 3
gentoo 1
redhatcve 4
debiancve 3
ubuntucve 3
github 4
cve 4
cvelist 3
atlassian 6
rosalinux 1
photon 1
almalinux 2
oraclelinux 2
zdt 1
kaspersky 5
veracode 3
githubexploit 3
packetstorm 1
freebsd 1
cnvd 1
suse 1
openvas
openvas
Mageia: Security Advisory (MGASA-2023-0138)
2023-04-17 00:00:00
Debian: Security Advisory (DSA-5265-1)
2022-10-31 00:00:00
Debian: Security Advisory (DLA-3160-1)
2022-10-27 00:00:00
nessus
nessus
Debian DLA-3160-1 : tomcat9 - LTS security update
2022-10-26 00:00:00
Debian DSA-5265-1 : tomcat9 - security update
2022-10-30 00:00:00
Amazon Linux 2023 : tomcat9, tomcat9-admin-webapps, tomcat9-el-3.0-api (ALAS2023-2023-176)
2023-05-03 00:00:00
debian
debian
[SECURITY] [DSA 5265-1] tomcat9 security update
2022-10-29 21:59:51
[SECURITY] [DLA 3160-1] tomcat9 security update
2022-10-26 12:16:26
[SECURITY] [DSA 5381-1] tomcat9 security update
2023-04-05 20:07:07
ibm
ibm
Security Bulletin: IBM Rational Build Forge 8.0.0.24 addresses multiple vulnerabilities by updating Apache Tomcat Server
2023-10-31 15:09:32
Security Bulletin: IBM UrbanCode Release is affected by CVE-2022-42252
2023-01-20 16:11:01
Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Apache Tomcat (CVE-2023-28708, CVE-2023-24998)
2023-07-14 23:49:52
osv
osv
tomcat9 - security update
2022-10-29 00:00:00
tomcat9 - security update
2022-10-26 00:00:00
tomcat9 - security update
2023-04-05 00:00:00
redhat
redhat
(RHSA-2022:7272) Moderate: Red Hat JBoss Web Server 5.7.0 release and security update
2022-11-02 10:37:41
(RHSA-2023:1664) Low: Red Hat JBoss Web Server 5.7.2 release and security update
2023-04-12 12:28:51
(RHSA-2023:1663) Low: Red Hat JBoss Web Server 5.7.2 release and security update
2023-04-12 12:21:17
amazon
amazon
Important: tomcat8
2023-04-13 19:01:00
Medium: tomcat8
2022-03-07 23:20:00
tomcat
tomcat
Fixed in Apache Tomcat 9.0.58
2022-01-20 00:00:00
Fixed in Apache Tomcat 10.0.16
2022-01-20 00:00:00
Fixed in Apache Tomcat 8.5.75
2022-01-20 00:00:00
prion
prion
Code injection
2022-01-27 13:15:00
Design/Logic Flaw
2022-09-28 14:15:00
Cross site scripting
2022-06-23 11:15:00
nvd
nvd
CVE-2022-23181
2022-01-27 13:15:08
CVE-2022-29885
2022-05-12 08:15:07
CVE-2021-43980
2022-09-28 14:15:09
f5
f5
K28409053 : Apache Tomcat vulnerability CVE-2022-23181
2022-02-18 00:00:00
K47096851 : Apache Tomcat vulnerability CVE-2022-29885
2022-06-15 00:00:00
K41102235 : Tomcat vulnerability CVE-2021-43980
2022-10-18 00:00:00
gentoo
gentoo
Apache Tomcat: Multiple Vulnerabilities
2023-05-30 00:00:00
redhatcve
redhatcve
CVE-2022-23181
2022-01-27 20:03:46
CVE-2021-43980
2022-09-28 15:18:54
CVE-2022-34305
2022-06-30 18:05:42
debiancve
debiancve
CVE-2022-23181
2022-01-27 13:15:08
CVE-2021-43980
2022-09-28 14:15:09
CVE-2022-29885
2022-05-12 08:15:07
ubuntucve
ubuntucve
CVE-2022-23181
2022-01-27 00:00:00
CVE-2022-29885
2022-05-12 00:00:00
CVE-2021-43980
2022-09-28 00:00:00
github
github
Race condition in Apache Tomcat
2022-02-01 00:45:44
Apache Tomcat Race Condition vulnerability
2022-09-29 00:00:25
Cross-site Scripting in Apache Tomcat
2022-06-24 00:00:32
cve
cve
CVE-2022-23181
2022-01-27 13:15:08
CVE-2021-43980
2022-09-28 14:15:09
CVE-2022-34305
2022-06-23 11:15:07
cvelist
cvelist
CVE-2022-23181 Local privilege escalation with FileStore
2022-01-27 00:00:00
CVE-2022-34305 XSS in examples web application
2022-06-23 10:30:16
CVE-2021-43980 Apache Tomcat: Information disclosure
2022-09-28 00:00:00
atlassian
atlassian
Update Tomcat to version 8.5.75 to address CVE-2020-9484/CVE-2022-23181
2022-02-08 16:45:17
A vulnerable version of Apache Tomcat was used in Jira Server (CVE-2020-9484, CVE-2022-23181)
2022-04-20 20:14:02
Confluence Apache Tomcat CVE-2022-34305
2022-07-07 19:05:27
rosalinux
rosalinux
Advisory ROSA-SA-2023-2258
2023-10-21 16:49:43
photon
photon
Important Photon OS Security Update - PHSA-2023-4.0-0314
2023-01-17 00:00:00
almalinux
almalinux
Moderate: tomcat security and bug fix update
2023-11-14 00:00:00
Moderate: tomcat security and bug fix update
2023-11-07 00:00:00
oraclelinux
oraclelinux
tomcat security and bug fix update
2023-11-11 00:00:00
tomcat security and bug fix update
2023-11-17 00:00:00
zdt
zdt
Apache Tomcat 10.1 - Denial Of Service Exploit
2023-04-05 00:00:00
kaspersky
kaspersky
KLA19262 XSS vulnerability in Apache Tomcat
2022-07-26 00:00:00
KLA19260 XSS vulnerability in Apache Tomcat
2022-08-28 00:00:00
KLA19263 OSI vulnerability in Apache Tomcat
2022-04-01 00:00:00
veracode
veracode
Denial Of Service (DoS)
2022-05-13 04:14:07
Information Disclosure
2022-10-03 08:39:35
Time Of Check To Time Of Use (TOCTOU)
2022-01-28 04:38:08
githubexploit
githubexploit
Exploit for Uncontrolled Resource Consumption in Apache Tomcat
2022-07-01 09:02:10
Exploit for Uncontrolled Resource Consumption in Apache Tomcat
2022-06-30 16:09:25
Exploit for Vulnerability in Apache Tomcat
2022-04-30 02:30:00
packetstorm
packetstorm
Apache Tomcat 10.1 Denial Of Service
2023-04-06 00:00:00
freebsd
freebsd
Tomcat -- XSS in examples web application
2022-06-22 00:00:00
cnvd
cnvd
Apache Tomcat Cross-Site Scripting Vulnerability
2022-06-27 00:00:00
suse
suse
Security update for tomcat (important)
2022-03-14 00:00:00

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.922 High

EPSS

Percentile

99.0%

JSON
Related for MGASA-2023-0138
openvas18nessus54debian4ibm19osv18redhat7amazon2tomcat17prion4nvd3f53gentoo1redhatcve4debiancve3ubuntucve3github4cve4cvelist3atlassian6rosalinux1photon1almalinux2oraclelinux2zdt1kaspersky5veracode3githubexploit3packetstorm1freebsd1cnvd1suse1