CVE-2024-52317

Description

Incorrect object re-cycling and re-use vulnerability in Apache Tomcat. Incorrect recycling of the request and response used by HTTP/2 requests could lead to request and/or response mix-up between users. This issue affects Apache Tomcat: from 11.0.0-M23 through 11.0.0-M26, from 10.1.27 through 10.1.30, from 9.0.92 through 9.0.95. Users are recommended to upgrade to version 11.0.0, 10.1.31 or 9.0.96, which fixes the issue.

Reserved 2024-11-07 | Published 2024-11-18 | Updated 2024-11-18 | Assigner apache

Problem types

Incorrect object re-cycling and re-use

Product status

Default status
unaffected

11.0.0-M23
affected

10.1.27
affected

9.0.92
affected

References

lists.apache.org/thread/ty376mrxy1mmxtw3ogo53nc9l3co3dfs vendor-advisory

cve.org (CVE-2024-52317)

nvd.nist.gov (CVE-2024-52317)

Download JSON