Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Apache Tomcat Allocation of Resources Without Limits or Throttling Vulnerability - CVE-2024-38286 - Vulnerability Database
Apache Tomcat

Apache Tomcat Allocation of Resources Without Limits or Throttling Vulnerability - CVE-2024-38286

High
Reference: CVE-2024-38286
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2024-38286
Title: Apache Tomcat Allocation of Resources Without Limits or Throttling Vulnerability
Overview:

Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M20 from 10.1.0-M1 through 10.1.24 from 9.0.13 through 9.0.89. Older unsupported versions may also be affected. Users are recommended to upgrade to version 11.0.0-M21 10.1.25 or 9.0.90 which fixes the issue. Apache Tomcat under certain configurations on any platform allows an attacker to cause an OutOfMemoryError by abusing the TLS handshake process.