Vulnerability Lookup

🛡️ UBUNTU-CVE-2024-54677

⚪ Unknown ✅ No Known Exploit OSV

N/A

CVSS Score

0 Low4 Medium7 High9 Critical10

Description

Uncontrolled Resource Consumption vulnerability in the examples web application provided with Apache Tomcat leads to denial of service. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.1, from 10.1.0-M1 through 10.1.33, from 9.0.0.M1 through 9.9.97. The following versions were EOL at the time the CVE was created but are known to be affected: 8.5.0 though 8.5.100. Other, older, EOL versions may also be affected. Users are recommended to upgrade to version 11.0.2, 10.1.34 or 9.0.98, which fixes the issue.

Details

Severity Unknown

CVSS Score N/A

CVSS Vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CWE N/A

Public Exploit ✅ No

Source OSV

Published 2024-12-17

Updated 2026-06-11

Modified 2026-06-10

Fix URL N/A

Affected Packages

Software	From version	Fixed in
tomcat10	—	10.1.16-1ubuntu0.1~esm3
tomcat11	—	—
tomcat6	—	—
tomcat7	—	—
tomcat8	—	—
tomcat9	—	—

References

REPORT https://ubuntu.com/security/CVE-2024-54677

REPORT https://www.cve.org/CVERecord?id=CVE-2024-54677

REPORT https://lists.apache.org/thread/tdtbbxpg5trdwc2wnopcth9ccvdftq2n

REPORT https://github.com/apache/tomcat/commit/f57a9d9847c1038be61f5818d73b8be907c460d4

REPORT https://github.com/apache/tomcat/commit/aa5b4d0043289cf054f531ec55126c980d3572e1

REPORT https://github.com/apache/tomcat/commit/e8c16cdba833884e1bd49fff1f1cb699da177585

REPORT https://github.com/apache/tomcat/commit/dbec927859d9484cb8bd680a7c67b1a560f48444

REPORT https://github.com/apache/tomcat/commit/d63a10afc142b12f462a15f7d10f79fd80ff94eb

REPORT https://github.com/apache/tomcat/commit/54e56495e9a106218efe9fc9c79d976c0032bbfd

REPORT https://github.com/apache/tomcat/commit/bbd82e9593314ade4cfd57248f9285fbad686f66

REPORT https://github.com/apache/tomcat/commit/1d88dd3ffaed76188dd4ee32ce77709ce6e153cd

REPORT https://github.com/apache/tomcat/commit/721544ea28e92549824b106be954a9f411867a1c

REPORT https://github.com/apache/tomcat/commit/84065e26ca4555e63a922bb29b13b0a1c86b7654

REPORT https://github.com/apache/tomcat/commit/3315a9027a7eaab18f42625b97b569940ff1365d

REPORT https://github.com/apache/tomcat/commit/c2f7ce21c3fb12caefee87c517a8bb4f80700044

REPORT https://github.com/apache/tomcat/commit/75ff7e8622edcc024b268677aa789ee8f0880ecc

REPORT https://github.com/apache/tomcat/commit/4d5cc6538d91386f950373ac8120e98c2c78ed3a

REPORT https://github.com/apache/tomcat/commit/84c4af76e7a10fc7f8630ce62e6a46632ea4a90e

REPORT https://github.com/apache/tomcat/commit/9ffd23fc27f5d1fc95bf97e5cea175c8968f4533

REPORT http://www.openwall.com/lists/oss-security/2024/12/17/5

REPORT http://www.openwall.com/lists/oss-security/2024/12/17/6

ADVISORY https://ubuntu.com/security/notices/USN-7705-1

🔗 NVD 🔗 Mitre

Similar Threats

Free Vulnerability Check

Is your WordPress site affected?

BotEraser helps you identify potentially vulnerable plugins and themes by checking your installation against known CVE records.

Scan My Site Free →

No credit card required · Results in minutes

ⓘ Data Notice: The information presented above has been compiled from publicly available internet sources. Boteraser aggregates this data solely for informational purposes and does not independently classify, evaluate, or endorse any findings about the vulnerabilities listed. The accuracy and completeness of this information is the sole responsibility of the original publishers. Boteraser and its operators accept no liability for any decisions made based on this data.

Is your WordPress site affected?

Company

Resources

Services

Trusted

Subscribe