Test Kennung:	1.3.6.1.4.1.25623.1.0.104550
Kategorie:	Web Servers
Titel:	Apache Tomcat DoS Vulnerability (Feb 2023) - Linux
Zusammenfassung:	Apache Tomcat is prone to a denial of service (DoS); vulnerability.
Beschreibung:	Summary: Apache Tomcat is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: Apache Tomcat uses a packaged renamed copy of Apache Commons FileUpload to provide the file upload functionality defined in the Jakarta Servlet specification. Apache Tomcat was, therefore, also vulnerable to the Apache Commons FileUpload vulnerability CVE-2023-24998 as there was no limit to the number of request parts processed. This resulted in the possibility of an attacker triggering a DoS with a malicious upload or series of uploads. Affected Software/OS: Apache Tomcat versions through 8.5.84, 9.0.0-M1 through 9.0.70, 10.x through 10.1.4 and 11.0.0-M1 only. Solution: Update to version 8.5.85, 9.0.71, 10.1.5, 11.0.0-M3 or later. CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2023-24998 Debian Security Information: DSA-5522 (Google Search) https://www.debian.org/security/2023/dsa-5522 https://security.gentoo.org/glsa/202305-37 https://lists.apache.org/thread/4xl4l09mhwg4vgsk7dxqogcjrobrrdoy https://lists.debian.org/debian-lts-announce/2023/10/msg00020.html http://www.openwall.com/lists/oss-security/2023/05/22/1
Copyright	Copyright (C) 2023 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.