Multiple vulnerabilities in Apache Tomcat

Description

Multiple vulnerabilities were found in Apache Tomcat. Malicious users can exploit these vulnerabilities to cause denial of service.

Below is a complete list of vulnerabilities:

1. Denial of service vulnerability in excessive HTTP headers when processing an HTTP/2 stream can be exploited to cause denial service.
2. Denial of service vulnerability in configurations on any platform can be exploited to cause denial service by abusing the TLS handshake process.

Original advisories

• Apache Tomcat 10.1 vulnerabilities

• Apache Tomcat 9.0 vulnerabilities

Related products

• Apache-Tomcat

CVE list

• CVE-2024-34750
  critical
• CVE-2024-38286
  unknown

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com