TI-2025-31117 CVE-2025-48989 · GHSA-gqp3-2cvr-x8m3
Apache Tomcat: h2 DoS - Made You Reset
Priority MEDIUM 45
Improper Resource Shutdown or Release vulnerability in Apache Tomcat made Tomcat vulnerable to the made you reset attack.
RHSA-2025:13685
Red Hat JBoss Web Server 6.1.2 release and security update
Released 2025-08-13 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat JBoss Web Server 6.1 for RHEL 10 jws6-tomcat-10.1.36-8.redhat_00009.1.el10jws, jws6-tomcat-admin-webapps-10.1.36-8.redhat_00009.1.el10jws, jws6-tomcat-docs-webapp-10.1.36-8.redhat_00009.1.el10jws +7
- Red Hat JBoss Web Server 6.1 for RHEL 8 jws6-tomcat-10.1.36-8.redhat_00009.1.el8jws, jws6-tomcat-admin-webapps-10.1.36-8.redhat_00009.1.el8jws, jws6-tomcat-docs-webapp-10.1.36-8.redhat_00009.1.el8jws +7
- Red Hat JBoss Web Server 6.1 for RHEL 9 jws6-tomcat-10.1.36-8.redhat_00009.1.el9jws, jws6-tomcat-admin-webapps-10.1.36-8.redhat_00009.1.el9jws, jws6-tomcat-docs-webapp-10.1.36-8.redhat_00009.1.el9jws +7
Fixes 2 records
TI-2025-32628 CVE-2025-52520 · GHSA-wr62-c79q-cv37
Apache Tomcat: DoS via integer overflow in multipart file upload
Priority MEDIUM 43
For some unlikely configurations of multipart upload, an Integer Overflow vulnerability in Apache Tomcat could lead to a DoS via bypassing of size limits.