CVE-2024-24549 Apache Tomcat - Denial of Service

spencer_tseng

已于 2024-07-16 19:16:16 修改

阅读量298

点赞数 8

分类专栏： tomcat 文章标签： apache tomcat java

于 2024-07-16 19:05:04 首次发布

本文链接：https://blog.csdn.net/spencer_tseng/article/details/140473914

版权

tomcat 专栏收录该内容

44 篇文章 0 订阅

订阅专栏

https://lists.apache.org/thread/4c50rmomhbbsdgfjsgwlb51xdwfjdcvg

Apache Tomcat输入验证错误漏洞，HTTP/2请求的输入验证不正确，会导致拒绝服务，可以借助该漏洞攻击服务器。

https://mvnrepository.com/artifact/org.apache.tomcat.embed/tomcat-embed-core

<dependency>
           <groupId>org.apache.tomcat.embed</groupId>
           <artifactId>tomcat-embed-core</artifactId>
           <version>8.5.99</version>
       </dependency>
       <dependency>
           <groupId>org.apache.tomcat.embed</groupId>
           <artifactId>tomcat-embed-el</artifactId>
           <version>8.5.99</version>
       </dependency>
       <dependency>
           <groupId>org.apache.tomcat.embed</groupId>
           <artifactId>tomcat-embed-websocket</artifactId>
           <version>8.5.99</version>
       </dependency>
       <dependency>
           <groupId>org.apache.tomcat</groupId>
           <artifactId>tomcat-annotations-api</artifactId>
           <version>8.5.99</version>
       </dependency>