CVE-2024-54677

Published Dec 17, 2024

Last updated a month ago

CVSS medium 5.3

Overview

Description
Uncontrolled Resource Consumption vulnerability in the examples web application provided with Apache Tomcat leads to denial of service. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.1, from 10.1.0-M1 through 10.1.33, from 9.0.0.M1 through 9.9.97. Users are recommended to upgrade to version 11.0.2, 10.1.34 or 9.0.98, which fixes the issue.
Source
security@apache.org
NVD status
Awaiting Analysis

Risk scores

CVSS 3.1

Type
Secondary
Base score
5.3
Impact score
1.4
Exploitability score
3.9
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Severity
MEDIUM

Weaknesses

security@apache.org
CWE-400

Social media

Hype score
Not currently trending

  1. Critical updates released for Apache Tomcat to fix RCE and DoS vulnerabilities (CVE-2024-50379 & CVE-2024-54677). Users should update immediately to reduce risks. 🔒💻 #TomcatVulnerabilities #RCEAttack #DoSThreat #CybersecurityNews link: https://t.co/hKezMhhiok https://t.co/

    @TweetThreatNews

    19 Dec 2024

    108 Impressions

    0 Retweets

    1 Like

    0 Bookmarks

    0 Replies

    0 Quotes

  2. #Vulnerability #apacheTomcat RCE and DoS Vulnerabilities Addressed in Apache Tomcat: CVE-2024-50379 and CVE-2024-54677 https://t.co/0JB8PDv2lg

    @Komodosec

    18 Dec 2024

    70 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  3. Apache Tomcat fixes CVE-2024-50379 and CVE-2024-54677 #ApacheTomcat #CVE-2024-50379 #CVE-2024-54677 https://t.co/mDBNcV8GOy

    @pravin_karthik

    18 Dec 2024

    92 Impressions

    0 Retweets

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  4. Solucionadas vulnerabilidades RCE y DoS en Apache Tomcat: CVE-2024-50379 CVE-2024-54677 https://t.co/ihQyoSbRAa https://t.co/vN70vFH5iG

    @elhackernet

    18 Dec 2024

    1732 Impressions

    0 Retweets

    2 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  5. ⚠️⚠️ RCE and DoS Vulnerabilities Addressed in Apache Tomcat: CVE-2024-50379 and CVE-2024-54677 🎯6m+ Results are found on the https://t.co/pb16tGYaKe nearly year. 🔗FOFA Link:https://t.co/GfMvWUMWTU FOFA Query:app="APACHE-Tomcat" 🔖Refer: https://t.co/CKsPhglV5e #OSINT #FOFA

    @fofabot

    18 Dec 2024

    2221 Impressions

    7 Retweets

    17 Likes

    7 Bookmarks

    0 Replies

    1 Quote

  6. Go fix your Tomcat. Latest is 9.0.98 Fixes for CVE-2024-50379 and CVE-2024-54677 https://t.co/bKVfrDXTpN

    @0xMahi

    18 Dec 2024

    1211 Impressions

    0 Retweets

    10 Likes

    0 Bookmarks

    3 Replies

    0 Quotes

  7. RCE and DoS Vulnerabilities Addressed in Apache Tomcat: CVE-2024-50379 and CVE-2024-54677 https://t.co/KXJUmr8HAn

    @Dinosn

    18 Dec 2024

    8366 Impressions

    53 Retweets

    154 Likes

    54 Bookmarks

    0 Replies

    2 Quotes

  8. RCE and DoS Vulnerabilities Addressed in Apache Tomcat Stay protected from #Apache #Tomcat vulnerabilities. Learn about CVE-2024-50379 and CVE-2024-54677 and the security updates to address these flaws https://t.co/pp92xkexi0

    @the_yellow_fall

    18 Dec 2024

    83 Impressions

    1 Retweet

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  9. CVE-2024-54677 Uncontrolled Resource Consumption vulnerability in the examples web application provided with Apache Tomcat leads to denial of service. This issue affects Apache Tom… https://t.co/65aEbOWIRX

    @CVEnew

    17 Dec 2024

    255 Impressions

    2 Retweets

    1 Like

    0 Bookmarks

    0 Replies

    0 Quotes

References