Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:DSA-5665-1
HistoryApr 17, 2024 - 12:00 a.m.

tomcat10 - security update

2024-04-1700:00:00
Google
osv.dev
7
tomcat10
security update
bulletin
description
software

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

6.6 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.1%

JSON

Bulletin has no description

Related

debian 4
osv 17
openvas 17
nessus 56
ibm 15
mageia 1
tomcat 7
almalinux 4
redhat 16
oraclelinux 4
fedora 2
amazon 3
rocky 2
kaspersky 4
nvd 3
redhatcve 3
debiancve 3
redos 2
hackerone 1
vulnrichment 2
cve 3
cnvd 1
ubuntucve 3
cgr 3
veracode 3
wolfi 2
prion 3
cvelist 3
github 3
f5 1
atlassian 8
debian
debian
[SECURITY] [DSA 5665-1] tomcat10 security update
2024-04-17 22:03:15
[SECURITY] [DSA 5667-1] tomcat9 security update
2024-04-19 20:06:14
[SECURITY] [DLA 3779-1] tomcat9 security update
2024-04-06 05:26:26
osv
osv
tomcat9 - security update
2024-04-19 00:00:00
Important: tomcat security and bug fix update
2024-06-14 13:59:30
Important: tomcat security and bug fix update
2024-06-06 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-5667-1)
2024-04-22 00:00:00
Debian: Security Advisory (DSA-5665-1)
2024-04-18 00:00:00
SUSE: Security Advisory (SUSE-SU-2024:1345-1)
2024-05-07 00:00:00
nessus
nessus
Debian dsa-5667 : libtomcat9-embed-java - security update
2024-04-20 00:00:00
Debian dsa-5665 : libtomcat10-embed-java - security update
2024-04-18 00:00:00
Amazon Linux 2 : tomcat (ALASTOMCAT9-2024-013)
2024-04-18 00:00:00
ibm
ibm
Security Bulletin: IBM DevOps Build 7.0.0.1 addresses multiple vulnerabilities.
2024-03-27 17:19:49
Security Bulletin: Vulnerabilities in Apache Tomcat affect IBM SAN Volume Controller, IBM Storwize, IBM Storage Virtualize and IBM FlashSystem products
2024-06-19 15:29:31
Security Bulletin: IBM DevOps Release 7.0.0.1 addresses multiple vulnerabilities.
2024-03-27 17:25:57
mageia
mageia
Updated tomcat packages fix security vulnerabilities
2024-03-27 01:02:49
tomcat
tomcat
Fixed in Apache Tomcat 8.5.99
2024-02-19 00:00:00
Fixed in Apache Tomcat 9.0.86
2024-02-19 00:00:00
Fixed in Apache Tomcat 11.0.0-M17
2024-02-19 00:00:00
almalinux
almalinux
Important: tomcat security and bug fix update
2024-06-06 00:00:00
Important: tomcat security and bug fix update
2024-05-23 00:00:00
Important: tomcat security update
2024-01-29 00:00:00
redhat
redhat
(RHSA-2024:3666) Important: tomcat security and bug fix update
2024-06-06 08:15:12
(RHSA-2024:3308) Important: tomcat security and bug fix update
2024-05-23 05:51:21
(RHSA-2024:3307) Important: tomcat security and bug fix update
2024-05-23 05:51:20
oraclelinux
oraclelinux
tomcat security and bug fix update
2024-06-06 00:00:00
tomcat security and bug fix update
2024-05-23 00:00:00
tomcat security update
2024-01-29 00:00:00
fedora
fedora
[SECURITY] Fedora 39 Update: tomcat-9.0.89-1.fc39
2024-06-13 03:03:35
[SECURITY] Fedora 40 Update: tomcat-9.0.89-1.fc40
2024-06-23 06:52:19
amazon
amazon
Important: tomcat8
2024-06-19 18:46:00
Important: tomcat
2024-04-11 01:07:00
Medium: tomcat8
2024-01-19 01:19:00
rocky
rocky
tomcat security and bug fix update
2024-06-14 14:00:40
tomcat security update
2024-02-12 20:16:50
kaspersky
kaspersky
KLA65144 Multiple vulnerabilities in Apache Tomcat
2024-02-19 00:00:00
KLA62192 ACE vulnerability in Apache Tomcat
2023-11-13 00:00:00
KLA62193 ACE vulnerability in Apache Tomcat
2023-11-14 00:00:00
nvd
nvd
CVE-2024-23672
2024-03-13 16:15:29
CVE-2024-24549
2024-03-13 16:15:29
CVE-2023-46589
2023-11-28 16:15:06
redhatcve
redhatcve
CVE-2024-23672
2024-03-14 21:39:59
CVE-2023-46589
2023-11-29 09:26:39
CVE-2024-24549
2024-03-14 21:40:09
debiancve
debiancve
CVE-2024-23672
2024-03-13 16:15:29
CVE-2024-24549
2024-03-13 16:15:29
CVE-2023-46589
2023-11-28 16:15:06
redos
redos
ROS-20240422-09
2024-04-22 00:00:00
ROS-20240703-12
2024-07-03 00:00:00
hackerone
hackerone
Internet Bug Bounty: Denial of Service caused by HTTP/2 CONTINUATION Flood
2024-01-25 12:51:50
vulnrichment
vulnrichment
CVE-2024-24549 Apache Tomcat: HTTP/2 header handling DoS
2024-03-13 15:46:53
CVE-2024-23672 Apache Tomcat: WebSocket DoS with incomplete closing handshake
2024-03-13 15:48:42
cve
cve
CVE-2024-23672
2024-03-13 16:15:29
CVE-2024-24549
2024-03-13 16:15:29
CVE-2023-46589
2023-11-28 16:15:06
cnvd
cnvd
Apache Tomcat Denial of Service Vulnerability (CNVD-2024-13569)
2024-03-15 00:00:00
ubuntucve
ubuntucve
CVE-2024-24549
2024-03-13 00:00:00
CVE-2024-23672
2024-03-13 00:00:00
CVE-2023-46589
2023-11-28 00:00:00
cgr
cgr
CVE-2024-24549 vulnerabilities
2024-05-19 03:07:16
CVE-2024-23672 vulnerabilities
2024-05-19 03:07:16
CVE-2023-46589 vulnerabilities
2024-05-19 03:07:16
veracode
veracode
Denial Of Service (DoS)
2024-03-16 20:57:13
Denial Of Service (DoS)
2024-03-15 06:11:57
Request Smuggling
2023-11-29 06:11:28
wolfi
wolfi
CVE-2024-23672 vulnerabilities
2024-07-05 21:08:40
CVE-2024-24549 vulnerabilities
2024-07-05 21:08:40
prion
prion
Input validation
2024-03-13 16:15:00
Input validation
2024-03-13 16:15:00
Input validation
2023-11-28 16:15:00
cvelist
cvelist
CVE-2024-23672 Apache Tomcat: WebSocket DoS with incomplete closing handshake
2024-03-13 15:48:42
CVE-2024-24549 Apache Tomcat: HTTP/2 header handling DoS
2024-03-13 15:46:53
CVE-2023-46589 Apache Tomcat: HTTP request smuggling via malformed trailer headers
2023-11-28 15:31:52
github
github
Denial of Service via incomplete cleanup vulnerability in Apache Tomcat
2024-03-13 18:31:34
Apache Tomcat Denial of Service due to improper input validation vulnerability for HTTP/2 requests
2024-03-13 18:31:34
Apache Tomcat Improper Input Validation vulnerability
2023-11-28 18:30:23
f5
f5
K000137926 : Apache Tomcat vulnerability CVE-2023-46589
2023-12-18 00:00:00
atlassian
atlassian
Request Smuggling org.apache.tomcat:tomcat-catalina Dependency in Confluence Data Center and Server
2024-01-17 06:46:32
Request Smuggling org.apache.tomcat:tomcat-catalina Dependency in Bamboo Data Center and Server
2023-12-14 07:45:15
Request Smuggling org.apache.tomcat:tomcat-catalina Dependency in Jira Software Data Center and Server
2024-01-11 06:46:14

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

6.6 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.1%

JSON
Related for OSV:DSA-5665-1
debian4osv17openvas17nessus56ibm15mageia1tomcat7almalinux4redhat16oraclelinux4fedora2amazon3rocky2kaspersky4nvd3redhatcve3debiancve3redos2hackerone1vulnrichment2cve3cnvd1ubuntucve3cgr3veracode3wolfi2prion3cvelist3github3f51atlassian8