jws5-tomcat vulnerabilities (Red Hat)
72 vulnerabilities.
-
jws5-tomcatRed Hat Apache Tomcat: Directory traversal via rewrite with possible RCE if PUT is enabled 7.5 High -
jws5-tomcatRed Hat Apache Tomcat: h2 DoS - Made You Reset 7.5 High -
jws5-tomcatRed Hat Apache Tomcat: DoS via excessive h2 streams at connection start 7.5 High -
jws5-tomcatRed Hat Apache Tomcat: DoS via integer overflow in multipart file upload 7.5 High -
jws5-tomcatRed Hat Apache Tomcat: APR/Native Connector crash leading to DoS 7.5 High -
jws5-tomcatRed Hat Apache Commons FileUpload, Apache Commons FileUpload: FileUpload DoS via part headers 7.5 High -
jws5-tomcatRed Hat Apache Tomcat: Security constraint bypass for pre/post-resources 7.5 High -
jws5-tomcatRed Hat Apache Tomcat: FileUpload large number of parts with headers DoS 7.5 High -
jws5-tomcatRed Hat Apache Tomcat: Bypass of rules in Rewrite Valve 9.8 Critical -
jws5-tomcatRed Hat Apache Tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame 7.5 High -
jws5-tomcatRed Hat Apache Tomcat: Potential RCE and/or information disclosure and/or information corruption with partial PUT 9.8 Critical -
jws5-tomcatRed Hat Apache Tomcat: RCE due to TOCTOU issue in JSP compilation - CVE-2024-50379 mitigation was incomplete 9.8 Critical -
jws5-tomcatRed Hat Apache Tomcat: RCE due to TOCTOU issue in JSP compilation 9.8 Critical -
jws5-tomcatRed Hat Apache Tomcat: Denial of Service 8.6 High -
jws5-tomcatRed Hat Apache Tomcat: HTTP/2 excess header handling DoS 7.5 High -
jws5-tomcatRed Hat Apache Tomcat: WebSocket DoS with incomplete closing handshake 6.3 Medium -
jws5-tomcatRed Hat Apache Tomcat: HTTP/2 header handling DoS 7.5 High -
jws5-tomcatRed Hat Apache Tomcat: HTTP request smuggling via malformed trailer headers 7.5 High -
jws5-tomcatRed Hat Excessive time spent in DH check / generation with large Q parameter value 5.3 Medium -
jws5-tomcatRed Hat Apache Tomcat: Trailer header parsing too lenient 5.3 Medium -
jws5-tomcatRed Hat Apache Tomcat: Failure during request clean-up leads to sensitive data leaking to subsequent requests 5.3 Medium -
jws5-tomcatRed Hat Apache Tomcat: Open redirect with FORM authentication 6.1 Medium -
jws5-tomcatRed Hat Excessive time spent checking DH q parameter value 5.3 Medium -
jws5-tomcatRed Hat Excessive time spent checking DH keys and parameters 5.3 Medium -
jws5-tomcatRed Hat Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations 7.5 High -
jws5-tomcatRed Hat Possible DoS translating ASN.1 object identifiers 6.5 Medium -
jws5-tomcatRed Hat Apache Tomcat: Fix for CVE-2023-24998 is incomplete 7.5 High -
jws5-tomcatRed Hat Certificate policy check not enabled 5.3 Medium -
jws5-tomcatRed Hat Invalid certificate policies in leaf certificates are silently ignored 5.3 Medium -
jws5-tomcatRed Hat Excessive Resource Usage Verifying X.509 Policy Constraints 7.5 High -
jws5-tomcatRed Hat Apache Tomcat: JSESSIONID Cookie missing secure attribute in some configurations 4.3 Medium -
jws5-tomcatRed Hat Apache Commons FileUpload, Apache Tomcat: FileUpload DoS with excessive parts 7.5 High -
jws5-tomcatRed Hat Apache Portable Runtime (APR): out-of-bound writes in the apr_encode family of functions 9.8 Critical -
jws5-tomcatRed Hat Apache Tomcat: JsonErrorReportValve escaping 7.5 High -
jws5-tomcatRed Hat Apache Tomcat request smuggling via malformed content-length 7.5 High -
jws5-tomcatRed Hat Apache Tomcat: Information disclosure 3.7 Low -
jws5-tomcatRed Hat Infinite loop in BN_mod_sqrt() reachable when parsing certificates 7.5 High -
jws5-tomcatRed Hat Local privilege escalation with FileStore 7.0 High -
jws5-tomcatRed Hat DoS via memory leak with WebSocket connections 7.5 High -
jws5-tomcatRed Hat Apache Tomcat DoS with unexpected TLS packet 7.5 High -
jws5-tomcatRed Hat Read buffer overruns processing ASN.1 strings 7.4 High -
jws5-tomcatRed Hat Incorrect Transfer-Encoding handling with HTTP/1.0 5.3 Medium -
jws5-tomcatRed Hat Auth weakness in JNDIRealm 6.5 Medium -
jws5-tomcatRed Hat Incomplete fix for CVE-2020-9484 7.0 High -
jws5-tomcatRed Hat Apache Tomcat h2c request mix-up 7.5 High -
jws5-tomcatRed Hat Null pointer deref in X509_issuer_and_serial_hash() 5.9 Medium -
jws5-tomcatRed Hat Integer overflow in CipherUpdate 7.5 High -
jws5-tomcatRed Hat Apache Tomcat information disclosure 5.9 Medium -
jws5-tomcatRed Hat EDIPARTYNAME NULL pointer dereference 5.9 Medium -
jws5-tomcatRed Hat Apache Tomcat: Request header mix-up between HTTP/2 streams 7.5 High - Show olderLoading…