CVE-2024-34750
CVE-2024-34750 is a vulnerability in Apache Tomcat relating to improper handling of exceptional conditions and uncontrolled resource consumption. Specifically, Tomcat fails to properly manage excessive HTTP headers in HTTP/2 streams. This leads to incorrect accounting of active streams and the use of an incorrect timeout, allowing connections that should be closed to remain open, potentially causing a denial-of-service. The vulnerability affects Apache Tomcat versions 11.0.0-M1 through 11.0.0-M20, 10.1.0-M1 through 10.1.24, and 9.0.0-M1 through 9.0.89. While the CVSS score is 0, the SVRS score is 30, suggesting a lower immediate risk, but administrators should still upgrade to versions 11.0.0-M21, 10.1.25, or 9.0.90 to mitigate the potential for resource exhaustion. This vulnerability is significant because it allows malicious actors to potentially overwhelm Tomcat servers by keeping connections open indefinitely, leading to service disruptions.
Indicators of Compromise
Exploits
News
Social Media
Affected Software
References
CWE Details
CVE Radar
Real-time CVE Intelligence & Vulnerability Management Platform
CVE Radar provides comprehensive vulnerability intelligence by monitoring CVE databases, security advisories, and threat feeds. Get instant updates on new vulnerabilities, exploit details, and mitigation strategies specific to your assets.