Threats Tagged 'cve-2024-50379'

Multiple security vulnerabilities have been identified in Apache Tomcat as used in Red Hat products, including a remote code execution (RCE) due to a time-of-check to time-of-use (TOCTOU) issue in JSP compilation (CVE-2024-50379) and a denial of service (DoS) vulnerability via malformed HTTP/2 PRIORITY_UPDATE frames (CVE-2025-31650). Red Hat has released security updates addressing these issues for various versions of Tomcat9 and related products. The vulnerabilities have been rated with high severity, and patches are available.

Red Hat has issued a moderate severity security advisory for Apache Tomcat in Red Hat Enterprise Linux 8.8 Extended Update Support. The update addresses two vulnerabilities: CVE-2024-50379, a remote code execution (RCE) due to a time-of-check to time-of-use (TOCTOU) issue in JSP compilation, and CVE-2025-24813, which involves potential RCE, information disclosure, or information corruption via partial PUT requests. These vulnerabilities affect Tomcat versions prior to 9.0.87-1.el8_8.4. Red Hat provides updated packages to remediate these issues.

Two security vulnerabilities affecting Apache Tomcat in Red Hat Enterprise Linux 8 have been addressed. The first is a remote code execution (RCE) vulnerability caused by a time-of-check to time-of-use (TOCTOU) issue during JSP compilation (CVE-2024-50379). The second vulnerability involves potential remote code execution, information disclosure, or information corruption via partial HTTP PUT requests (CVE-2025-24813). Red Hat has released updated packages to fix these issues in Red Hat Enterprise Linux 8 versions prior to 8.10.3.

Red Hat has issued a security advisory for Apache Tomcat addressing two vulnerabilities: CVE-2024-50379, a remote code execution (RCE) due to a time-of-check to time-of-use (TOCTOU) issue in JSP compilation, and CVE-2025-24813, which involves potential RCE, information disclosure, or information corruption via partial PUT requests. The update applies to Red Hat Enterprise Linux 9.4 Extended Update Support and related variants. The advisory rates the security impact as moderate and provides updated packages to remediate these issues.

Red Hat has issued a security advisory for Apache Tomcat addressing two vulnerabilities: a time-of-check to time-of-use (TOCTOU) issue in JSP compilation (CVE-2024-50379) that could lead to remote code execution (RCE), and a vulnerability involving partial PUT requests that could result in RCE, information disclosure, or data corruption (CVE-2025-24813). The update is rated with moderate severity and affects Red Hat Enterprise Linux 9.2 Extended Update Support versions. The advisory provides updated packages to remediate these issues.

Two security vulnerabilities have been identified in Apache Tomcat as packaged in Red Hat Enterprise Linux 9. These include a remote code execution (RCE) vulnerability caused by a time-of-check to time-of-use (TOCTOU) issue in JSP compilation (CVE-2024-50379) and a vulnerability involving partial PUT requests that could lead to potential RCE, information disclosure, or data corruption (CVE-2025-24813). Red Hat has released updated Tomcat packages to address these issues in version 9.0.87-2.el9_5.1. The update is rated with a moderate security impact by Red Hat Product Security.

Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability during JSP compilation in Apache Tomcat permits an RCE on case insensitive file systems when the default servlet is enabled for write (non-default configuration). This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.1, from 10.1.0-M1 through 10.1.33, from 9.0.0.M1 through 9.0.97. The following versions were EOL at the time the CVE was created but are known to be affected: 8.5.0 though 8.5.100. Other, older, EOL versions may also be affected. Users are recommended to upgrade to version 11.0.2, 10.1.34 or 9.0.98, which fixes the issue.

CriticalVulnerabilityGermanyFranceUnited Kingdom+5#cve#cve-2024-50379#cwe-367