Threats Tagged 'cve-2025-31650'

A critical authentication bypass vulnerability (CVE-2024-52316) affecting Apache Tomcat 10.1.33 and related versions has been addressed in a security update provided by Red Hat and SUSE. The vulnerability involves improper handling of Jakarta Authentication failures that could lead to incorrect HTTP status codes. The update also includes fixes for WebDAV compliance, cache handling, logging, and concurrency issues. Patches are available for multiple affected versions across Red Hat Enterprise Linux and Ubuntu distributions.

Red Hat has issued a security update for Apache Tomcat in Red Hat Enterprise Linux 10 addressing multiple vulnerabilities. These include a security constraint bypass for CGI scripts (CVE-2025-46701), session fixation via the rewrite valve (CVE-2025-55668), and console manipulation (CVE-2025-55754). The update is rated as Important by Red Hat Product Security. The advisory provides updated packages to remediate these issues across various architectures supported by Red Hat Enterprise Linux 10.

Multiple security vulnerabilities have been identified in Apache Tomcat as used in Red Hat products, including a remote code execution (RCE) due to a time-of-check to time-of-use (TOCTOU) issue in JSP compilation (CVE-2024-50379) and a denial of service (DoS) vulnerability via malformed HTTP/2 PRIORITY_UPDATE frames (CVE-2025-31650). Red Hat has released security updates addressing these issues for various versions of Tomcat9 and related products. The vulnerabilities have been rated with high severity, and patches are available.

Apache Tomcat is a servlet container for the Java Servlet and JavaServer Pages (JSP) technologies. Security Fix(es): * tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation (CVE-2024-56337) * tomcat: Apache Tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Red Hat JBoss Web Server is a fully integrated and certified set of components for hosting Java web applications. It is comprised of the Apache Tomcat Servlet container, JBoss HTTP Connector (mod_cluster), the PicketLink Vault extension for Apache Tomcat, and the Tomcat Native library. This release of Red Hat JBoss Web Server 5.8.4 serves as a replacement for Red Hat JBoss Web Server 5.8.3. This release includes bug fixes, enhancements and component upgrades, which are documented in the Release Notes that are linked to in the References section. Security Fix(es): * tomcat: Incomplete fix for CVE-2024-50379 - RCE due to TOCTOU issue in JSP compilation [jws-5] (CVE-2024-56337) * tomcat: Apache Tomcat: DoS via malformed HTTP/2 PRIORITY_UPDATE frame [jws-5] (CVE-2025-31650) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Red Hat JBoss Web Server 5.8.4 includes security updates addressing two vulnerabilities in the Apache Tomcat component. One is an incomplete fix for a remote code execution vulnerability due to a time-of-check to time-of-use (TOCTOU) issue in JSP compilation (CVE-2024-56337). The other is a denial of service vulnerability via a malformed HTTP/2 PRIORITY_UPDATE frame (CVE-2025-31650). This update replaces version 5.8.3 and is rated as having an important security impact by Red Hat.

Apache Tomcat contains an improper input validation vulnerability in handling malformed HTTP/2 PRIORITY_UPDATE frames. This flaw causes incorrect error handling for some invalid HTTP priority headers, leading to incomplete cleanup of failed requests and a memory leak. A large number of such requests can trigger an OutOfMemoryException, resulting in a denial of service. The issue affects multiple versions across Tomcat 8.5, 9.0, 10.1, and 11.0 branches. Fixed versions have been released to address this vulnerability.