REDHAT-BUG-2379374: Integer Overflow
For some unlikely configurations of multipart upload, an Integer Overflow vulnerability in Apache Tomcat could lead to a DoS via bypassing of size limits.
This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.8, from 10.1.0-M1 through 10.1.42, from 9.0.0.M1 through 9.0.106.
Users are recommended to upgrade to version 11.0.9, 10.1.43 or 9.0.107, which fix the issue.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2379374?
The severity of REDHAT-BUG-2379374 is classified as moderate due to the potential for a denial of service condition.
How do I fix REDHAT-BUG-2379374?
To mitigate REDHAT-BUG-2379374, update Apache Tomcat to a version that is not affected, specifically versions after 11.0.8, 10.1.42, or 9.0.106.
Which versions of Apache Tomcat are affected by REDHAT-BUG-2379374?
REDHAT-BUG-2379374 affects Apache Tomcat versions from 11.0.0-M1 to 11.0.8, from 10.1.0-M1 to 10.1.42, and from 9.0.0.M1 to 9.0.106.
What type of vulnerability is REDHAT-BUG-2379374?
REDHAT-BUG-2379374 is an Integer Overflow vulnerability that could lead to denial of service through bypassing of size limits.
What impact does REDHAT-BUG-2379374 have on server security?
The impact of REDHAT-BUG-2379374 on server security is significant as it can allow an attacker to cause a denial of service, potentially disrupting service availability.