CVE-2024-54677

CVSS V2 None CVSS V3 None

Description

Uncontrolled Resource Consumption vulnerability in the examples web application provided with Apache Tomcat leads to denial of service. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.1, from 10.1.0-M1 through 10.1.33, from 9.0.0.M1 through 9.9.97. Users are recommended to upgrade to version 11.0.2, 10.1.34 or 9.0.98, which fixes the issue.

Overview

CVE ID
CVE-2024-54677

Assigner
apache

Vulnerability Status
PUBLISHED

Published Version
2024-12-17T12:35:50.948Z

Last Modified Date
2024-12-17T19:02:37.314Z

Weakness Enumerations

CWE	URL
CWE-400	http://cwe.mitre.org/data/definitions/400.html

References

Reference URL	Reference Tags
https://lists.apache.org/thread/tdtbbxpg5trdwc2wnopcth9ccvdftq2n	vendor-advisory

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-54677
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-54677

History

Created	Old Value	New Value	Data Type	Notes
2024-12-18 13:08:01				Added to TrackCVE