Bug 2314686 (CVE-2024-38286) - CVE-2024-38286 tomcat: Denial of Service in Tomcat
Summary: CVE-2024-38286 tomcat: Denial of Service in Tomcat
Keywords:
Status: NEW
Alias: CVE-2024-38286
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
high
high
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On: 2316256
Blocks:
TreeView+ depends on / blocked
 
Reported: 2024-09-25 15:09 UTC by OSIDB Bzimport
Modified: 2024-10-29 16:38 UTC (History)
5 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2024:4976 0 None None None 2024-10-01 11:42:36 UTC
Red Hat Product Errata RHSA-2024:4977 0 None None None 2024-10-01 11:35:49 UTC
Red Hat Product Errata RHSA-2024:5024 0 None None None 2024-10-01 13:29:36 UTC
Red Hat Product Errata RHSA-2024:5025 0 None None None 2024-10-01 13:29:23 UTC
Red Hat Product Errata RHSA-2024:5693 0 None None None 2024-10-09 18:20:09 UTC
Red Hat Product Errata RHSA-2024:5694 0 None None None 2024-10-09 18:25:58 UTC
Red Hat Product Errata RHSA-2024:5695 0 None None None 2024-10-10 18:15:51 UTC
Red Hat Product Errata RHSA-2024:5696 0 None None None 2024-10-09 18:17:32 UTC
Red Hat Product Errata RHSA-2024:8494 0 None None None 2024-10-28 01:14:53 UTC
Red Hat Product Errata RHSA-2024:8497 0 None None None 2024-10-28 01:17:59 UTC
Red Hat Product Errata RHSA-2024:8528 0 None None None 2024-10-28 12:28:13 UTC
Red Hat Product Errata RHSA-2024:8543 0 None None None 2024-10-28 18:05:56 UTC
Red Hat Product Errata RHSA-2024:8567 0 None None None 2024-10-29 12:04:12 UTC
Red Hat Product Errata RHSA-2024:8572 0 None None None 2024-10-29 16:38:22 UTC

Description OSIDB Bzimport 2024-09-25 15:09:12 UTC 
Tomcat, under certain configurations on any platform, allows an attacker to cause an OutOfMemoryError by abusing the TLS handshake process.
Comment 1 errata-xmlrpc 2024-10-01 11:35:48 UTC 
This issue has been addressed in the following products:

  Red Hat JBoss Web Server

Via RHSA-2024:4977 https://access.redhat.com/errata/RHSA-2024:4977
Comment 2 errata-xmlrpc 2024-10-01 11:42:34 UTC 
This issue has been addressed in the following products:

  Red Hat JBoss Web Server 6.0 on RHEL 8
  Red Hat JBoss Web Server 6.0 on RHEL 9

Via RHSA-2024:4976 https://access.redhat.com/errata/RHSA-2024:4976
Comment 3 errata-xmlrpc 2024-10-01 13:29:21 UTC 
This issue has been addressed in the following products:

  Red Hat JBoss Web Server

Via RHSA-2024:5025 https://access.redhat.com/errata/RHSA-2024:5025
Comment 4 errata-xmlrpc 2024-10-01 13:29:35 UTC 
This issue has been addressed in the following products:

  Red Hat JBoss Web Server 5.8 on RHEL 7
  Red Hat JBoss Web Server 5.8 on RHEL 8
  Red Hat JBoss Web Server 5.8 on RHEL 9

Via RHSA-2024:5024 https://access.redhat.com/errata/RHSA-2024:5024
Comment 5 errata-xmlrpc 2024-10-09 18:17:30 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.2 Extended Update Support

Via RHSA-2024:5696 https://access.redhat.com/errata/RHSA-2024:5696
Comment 6 errata-xmlrpc 2024-10-09 18:20:08 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2024:5693 https://access.redhat.com/errata/RHSA-2024:5693
Comment 7 errata-xmlrpc 2024-10-09 18:25:57 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2024:5694 https://access.redhat.com/errata/RHSA-2024:5694
Comment 8 errata-xmlrpc 2024-10-10 18:15:49 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.8 Extended Update Support

Via RHSA-2024:5695 https://access.redhat.com/errata/RHSA-2024:5695
Comment 9 errata-xmlrpc 2024-10-28 01:14:52 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.2 Extended Update Support

Via RHSA-2024:8494 https://access.redhat.com/errata/RHSA-2024:8494
Comment 10 errata-xmlrpc 2024-10-28 01:17:58 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
  Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions
  Red Hat Enterprise Linux 8.4 Telecommunications Update Service

Via RHSA-2024:8497 https://access.redhat.com/errata/RHSA-2024:8497
Comment 11 errata-xmlrpc 2024-10-28 12:28:11 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.0 Extended Update Support

Via RHSA-2024:8528 https://access.redhat.com/errata/RHSA-2024:8528
Comment 12 errata-xmlrpc 2024-10-28 18:05:54 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.8 Extended Update Support

Via RHSA-2024:8543 https://access.redhat.com/errata/RHSA-2024:8543
Comment 13 errata-xmlrpc 2024-10-29 12:04:10 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.2 Advanced Update Support

Via RHSA-2024:8567 https://access.redhat.com/errata/RHSA-2024:8567
Comment 14 errata-xmlrpc 2024-10-29 16:38:20 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
  Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions
  Red Hat Enterprise Linux 8.6 Telecommunications Update Service

Via RHSA-2024:8572 https://access.redhat.com/errata/RHSA-2024:8572
Note You need to log in before you can comment on or make changes to this bug.