REDHAT-BUG-2373015: Medium severity Apache Tomcat vulnerability

The severity of REDHAT-BUG-2373015 is considered high due to the potential for resource exhaustion.

To fix REDHAT-BUG-2373015, upgrade to Apache Tomcat version 11.0.8, 10.1.42, or 9.0.106.

The affected versions include Apache Tomcat 11.0.0-M1 through 11.0.7, 10.1.0-M1 through 10.1.41, and 9.0.0.M1 through 9.0.105.

REDHAT-BUG-2373015 is an allocation of resources without limits or throttling vulnerability.

No official workaround is provided for REDHAT-BUG-2373015; upgrading to the fixed versions is recommended.

Published Jun 16, 2025

Updated

Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat.

This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.7, from 10.1.0-M1 through 10.1.41, from 9.0.0.M1 through 9.0.105.

Users are recommended to upgrade to version 11.0.8, 10.1.42 or 9.0.106, which fix the issue.

Affected Software

1 affected component

Apache Tomcat>=11.0.0-M1<=11.0.7, >=10.1.0-M1<=10.1.41, >=9.0.0.M1<=9.0.105

Jun 16, 2025

Data Sourced

via Red Hat·03:01 PM

DescriptionSeverityAffected Software

The severity of REDHAT-BUG-2373015 is considered high due to the potential for resource exhaustion.

To fix REDHAT-BUG-2373015, upgrade to Apache Tomcat version 11.0.8, 10.1.42, or 9.0.106.

The affected versions include Apache Tomcat 11.0.0-M1 through 11.0.7, 10.1.0-M1 through 10.1.41, and 9.0.0.M1 through 9.0.105.

REDHAT-BUG-2373015 is an allocation of resources without limits or throttling vulnerability.

No official workaround is provided for REDHAT-BUG-2373015; upgrading to the fixed versions is recommended.