CVE-2023-42794: Apache Tomcat: FileUpload: DoS due to accumulation of temporary files on Windows
Incomplete Cleanup vulnerability in Apache Tomcat.
The internal fork of Commons FileUpload packaged with Apache Tomcat 9.0.70 through 9.0.80 and 8.5.85 through 8.5.93 included an unreleased, in progress refactoring that exposed a potential denial of service on Windows if a web application opened a stream for an uploaded file but failed to close the stream. The file would never be deleted from disk creating the possibility of an eventual denial of service due to the disk being full.
Other, EOL versions may also be affected.
Users are recommended to upgrade to version 9.0.81 onwards or 8.5.94 onwards, which fixes the issue.
Other sources
Incomplete Cleanup vulnerability in Apache Tomcat.
The internal fork of Commons FileUpload packaged with Apache Tomcat 9.0.70 through 9.0.80 and 8.5.85 through 8.5.93 included an unreleased, in progress refactoring that exposed a potential denial of service on Windows if a web application opened a stream for an uploaded file but failed to close the stream. The file would never be deleted from disk creating the possibility of an eventual denial of service due to the disk being full.
Users are recommended to upgrade to version 9.0.81 onwards or 8.5.94 onwards, which fixes the issue.
— NVD
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
maven/org.apache.tomcat:tomcat-coyoteto a version that resolves this vulnerability.Fixed in 8.5.94 - Upgrade
Upgrade
maven/org.apache.tomcat:tomcat-coyoteto a version that resolves this vulnerability.Fixed in 9.0.81 - Upgrade
Upgrade
redhat/tomcatto a version that resolves this vulnerability.Fixed in 9.0.81 - Upgrade
Upgrade
redhat/tomcatto a version that resolves this vulnerability.Fixed in 8.5.94 - Upgrade
Upgrade
Apache Tomcat (FileUpload: Commons FileUpload internal fork)to a version that resolves this vulnerability.Fixed in 9.0.81 onwardsPatch CVE-2023-42794 - Upgrade
Upgrade
Apache Tomcat (FileUpload: Commons FileUpload internal fork)to a version that resolves this vulnerability.Fixed in 8.5.94 onwardsPatch CVE-2023-42794
Event History
Frequently Asked Questions
What is CVE-2023-42794?
CVE-2023-42794 is an incomplete cleanup vulnerability in Apache Tomcat that can result in a denial of service due to the accumulation of temporary files on Windows.
Which versions of Apache Tomcat are affected by CVE-2023-42794?
Apache Tomcat versions 8.5.85 through 8.5.93 and 9.0.70 through 9.0.80 are affected by CVE-2023-42794.
How can CVE-2023-42794 be exploited?
CVE-2023-42794 can be exploited by a web application opening a large number of file upload requests on Windows, leading to the accumulation of temporary files and a potential denial of service.
What is the remedy for CVE-2023-42794?
To fix CVE-2023-42794, upgrade to Apache Tomcat version 8.5.94 or 9.0.81.
Where can I find more information about CVE-2023-42794?
You can find more information about CVE-2023-42794 on the Openwall, Apache, and NIST websites using the provided references.