CVE-2024-54677

描述

Uncontrolled Resource Consumption vulnerability in the examples web application provided with Apache Tomcat leads to denial of service. This issue affects Apache Tomcat: from 11.0.0 through 11.0.1, from 10.1.0 through 10.1.33, from 9.0.0 through 9.9.97. The following versions were EOL at the time the CVE was created but are known to be affected: 8.5.0 though 8.5.100. Other, older, EOL versions may also be affected. Users are recommended to upgrade to version 11.0.2, 10.1.34 or 9.0.98, which fixes the issue.

如何修補 CVE-2024-54677

要修補 CVE-2024-54677,請將受影響套件升級到下列已修補版本。

• —升級至 11.0.2 或更新版本

CVE-2024-54677 正在被利用嗎?

低 — EPSS 為 2.0%,目前沒有觀察到大規模利用活動。

受影響套件(1)

• >= 11.0.0-M1, < 11.0.2

CVSS 分數

參考連結(33)

• ADVISORYnvd.nist.gov/vuln/detail/CVE-2024-54677
• PATCHgithub.com/apache/tomcat
• WEBwww.openwall.com/lists/oss-security/2024/12/17/5
• WEBwww.openwall.com/lists/oss-security/2024/12/17/6
• WEB