F5-K000152911: Integer Overflow
For some unlikely configurations of multipart upload, an Integer Overflow vulnerability in Apache Tomcat could lead to a DoS via bypassing of size limits. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.8, from 10.1.0-M1 through 10.1.42, from 9.0.0.M1 through 9.0.106. Users are recommended to upgrade to version 11.0.9, 10.1.43 or 9.0.107, which fix the issue.
Affected Software
Event History
Frequently Asked Questions
What is the severity of F5-K000152911?
The severity of F5-K000152911 is considered to be critical due to the potential denial of service that can be triggered by the integer overflow.
How do I fix F5-K000152911?
To fix F5-K000152911, upgrade Apache Tomcat to versions 11.0.9, 10.1.43, or 9.0.107 or later.
What versions of Apache Tomcat are affected by F5-K000152911?
F5-K000152911 affects Apache Tomcat versions from 11.0.0-M1 through 11.0.8, 10.1.0-M1 through 10.1.42, and 9.0.0.M1 through 9.0.106.
What could happen if F5-K000152911 is exploited?
If F5-K000152911 is exploited, it could lead to a denial of service condition by bypassing size limits during multipart uploads.
Which product is specifically impacted by F5-K000152911?
F5-K000152911 specifically impacts the F5 Traffix SDC version 5.2.0.