Red Hat Security Advisory

RHSA-2024:5024

Red Hat JBoss Web Server 5.8.1 release and security update

Released 2024-08-06 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat JBoss Web Server 5.8 for RHEL 7 Server jws5-tomcat-9.0.87-5.redhat_00005.1.el7jws, jws5-tomcat-admin-webapps-9.0.87-5.redhat_00005.1.el7jws, jws5-tomcat-docs-webapp-9.0.87-5.redhat_00005.1.el7jws +9
Red Hat JBoss Web Server 5.8 for RHEL 8 jws5-tomcat-9.0.87-5.redhat_00005.1.el8jws, jws5-tomcat-admin-webapps-9.0.87-5.redhat_00005.1.el8jws, jws5-tomcat-docs-webapp-9.0.87-5.redhat_00005.1.el8jws +7
Red Hat JBoss Web Server 5.8 for RHEL 9 jws5-tomcat-9.0.87-5.redhat_00005.1.el9jws, jws5-tomcat-admin-webapps-9.0.87-5.redhat_00005.1.el9jws, jws5-tomcat-docs-webapp-9.0.87-5.redhat_00005.1.el9jws +7

TI-2024-25564 CVE-2024-38286 · GHSA-7jqf-v358-p8g7

MEDIUM 47

Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.0169 Published 2024-11-07 Partial fix · 11.0.0-M21, 10.1.25 +1 CWE-770

TI-2024-23041 CVE-2024-34750 · GHSA-wm9w-rjj3-j356

MEDIUM 46

Improper Handling of Exceptional Conditions, Uncontrolled Resource Consumption vulnerability in Apache Tomcat.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.04602 Published 2024-07-03 Partial fix · 11.0.0-M21, 10.1.25 +1 CWE-400