CVE-2024-54677
Uncontrolled Resource Consumption vulnerability in the examples web application provided with Apache Tomcat leads to denial of service. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.1, from 10.1.0-M1 through 10.1.33, from 9.0.0.M1 through 9.9.97. The following versions were EOL at the time the CVE was created but are known to be affected: 8.5.0 though 8.5.100. Other, older, EOL versions may also be affected. Users are recommended to upgrade to version 11.0.2, 10.1.34 or 9.0.98, which fixes the issue.
- Affected products
- Alt Linux, Apache Tomcat, Astra Linux, Debian, Linuxmint, Red Os, Suse, Ubuntu
- Apache Tomcat
- < 9.0.98, 10.1.34, 11.0.2
- Fix
- Available
- CVSS 3.1
- 5.3 MEDIUM
- EPSS
- 2.0% (78th percentile)
- Weakness
- CWE-400
- NVD status
- Modified
- Published
- 2024-12-17
No indexed exploits for CVE-2024-54677 yet
Our index is partial: it proves presence, never absence
No exploit for CVE-2024-54677 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.